CCI-000084

Implementation Guidance

The organization being inspected/assessed authorizes connection of mobile devices to organizational information systems. The organization must maintain an audit trail of authorizations.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of authorizations to ensure the organization being inspected/assessed authorizes connection of mobile devices to organizational information systems.

Compelling Evidence

1.) Signed and dated system security plan (SSP) 2.) Signed and dated mobile devices policy 3.) Audit trail of authorizations of mobile devices