CCI-000083

Establish implementation guidance for organization-controlled mobile devices, to include when such devices are outside of controlled areas.

Implementation Guidance

The organization being inspected/assessed establishes and documents implementation guidance for organization controlled mobile devices.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented implementation guidance to ensure the organization being inspected/assessed establishes implementation guidance for organization controlled mobile devices.

Compelling Evidence

1.) Signed and dated system security plan (SSP) 2.) Signed and dated mobile devices policy

The controls below (if any) were marked by NIST as being related to CCI-000083.