Navigate

CCI-000985

CCI-000985 Definition

The organization employs organization-defined security controls at alternate work sites.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed implements security controls defined in PE-17, CCI 2975 at alternate work sites. Alternate work sites are further defined in the definitions associated with this implementation guide. Organizational telework policies should be used to address alternate work sites that are private residences. Comment: For classified information see DoD 5200.01 Vol 3 Manual

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the alternate work site policy of the organization being inspected/assessed to ensure the organization implements security controls defined in PE-17, CCI 2975 at alternate work sites.

Compelling Evidence

1.) Telework policy

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000985.

Control	Description
PE-17	The organization: PE-17a.: Employs [Assignment: organization-defined security controls] at alternate work sites; PE-17b.: Assesses as feasible, the effectiveness of security controls at alternate work sites; and PE-17c.: Provides a means for employees to communicate with information security personnel in case of security incidents or problems.