CCI-000081

CCI-000081 Definition

The organization employs a business case/Exhibit 300/Exhibit 53 to record the resources required.

Status
Type	CheckType.policy

The controls below (if any) were marked by NIST as being related to CCI-000081.

Control	Description
PM-3	The organization: a: Ensures that all capital planning and investment requests include the resources needed to implement the information security program and documents all exceptions to this requirement; b: Employs a business case/Exhibit 300/Exhibit 53 to record the resources required; and c: Ensures that information security resources are available for expenditure as planned.