CCI-000854

Review and update the current maintenance policy in accordance with organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed reviews the current system maintenance policy every 5 years and revises as necessary to comply with DoD regulations. The organization must document each occurrence of the reviews and update actions as an audit trail. DoD has defined the frequency as every 5 years.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of occurrence of reviews and update actions for the maintenance policy to ensure review is occurring every 5 years and updates are made as necessary. DoD has defined the frequency as every 5 years.

Compelling Evidence

1.) Documentation and screenshots of maintenance policy on the occurrence of the reviews and update actions

The controls below (if any) were marked by NIST as being related to CCI-000854.