CCI-000981

The organization authorizes organization-defined types of information system components entering and exiting the facility.

Implementation Guidance

The organization being inspected/assessed authorizes and maintains authorization records of all system components entering and exiting the facility. DoD has defined the types of information system components as all system components.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines records authorizing all system components entering and exiting the facility. DoD has defined the types of information system components as all system components.

Compelling Evidence

1.) Authorization records of all system components

The controls below (if any) were marked by NIST as being related to CCI-000981.