Navigate

CCI-000080

CCI-000080 Definition

Include the resources needed to implement the information security programs in capital planning and investment requests and document all exceptions to this requirement.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000080.

Control	Description
PM-3	The organization: a: Ensures that all capital planning and investment requests include the resources needed to implement the information security program and documents all exceptions to this requirement; b: Employs a business case/Exhibit 300/Exhibit 53 to record the resources required; and c: Ensures that information security resources are available for expenditure as planned.