An error occurred:

CCIs

Number Definition Status Related
CCI-003361 The organization implements an anti-counterfeit policy that includes the means to prevent counterfeit components from entering the information system. Draft SA-19
CCI-003362 The organization implements anti-counterfeit procedures that include the means to detect counterfeit components from entering the information system. Draft SA-19
CCI-003363 The organization implements anti-counterfeit procedures that include the means to prevent counterfeit components from entering the information system. Draft SA-19
CCI-003364 The organization reports counterfeit information system components to the source of the counterfeit component, organization-defined external reporting organizations, and/or organization-defined personnel or roles. Draft SA-19
CCI-003365 The organization defines the external reporting organizations to which counterfeit information system components are to be reported. Draft SA-19
CCI-003366 The organization defines the personnel or roles to whom counterfeit information system components are to be reported. Draft SA-19
CCI-003367 The organization trains organization-defined personnel or roles to detect counterfeit information system components (including hardware, software, and firmware). Draft SA-19(1)
CCI-003368 The organization defines the personnel or roles to be trained to detect counterfeit information system components (including hardware, software, and firmware). Draft SA-19(1)
CCI-003369 The organization maintains configuration control over organization-defined information system components awaiting service/repair. Draft SA-19(2)
CCI-003370 The organization defines the information system components awaiting service/repair over which configuration control must be maintained. Draft SA-19(2)
CCI-003371 The organization maintains configuration control over serviced/repaired components awaiting return to service. Draft SA-19(2)
CCI-003372 Define the support from external providers to be provided for alternative sources for continued support for unsupported system components. Draft SA-22(1)
CCI-003373 Provide in-house support and/or organization-defined support from external providers for alternative sources for continued support for unsupported components. Draft SA-22(1)
CCI-003374 The organization documents approval for the continued use of unsupported system components required to satisfy mission/business needs. Draft SA-22
CCI-003375 The organization provides justification for the continued use of unsupported system components required to satisfy mission/business needs. Draft SA-22
CCI-003376 Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer. Draft SA-22
CCI-003377 The organization defines the actions the developer of the information system, system component, or information system service must take to ensure the required screening criteria are satisfied. Draft SA-21(1)
CCI-003378 The organization defines the actions the developer of the information system, system component, or information system service must take to ensure the required access authorizations are satisfied. Draft SA-21(1)
CCI-003379 The organization requires the developer of the information system, system component, or information system service take organization-defined actions to ensure the required screening criteria are satisfied. Draft SA-21(1)
CCI-003380 The organization requires the developer of the information system, system component, or information system service take organization-defined actions to ensure the required access authorizations are satisfied. Draft SA-21(1)
CCI-003381 Defines additional personnel screening criteria that must be satisfied by the developer of an organization-defined system, system component, or system service. Draft SA-21
CCI-003382 Require that the developer of an organization-defined system, system component, or system service satisfies organization-defined additional personnel screening criteria. Draft SA-21
CCI-003383 Defines the official government duties to be assigned to the developer of an organization-defined system, system component, or system service. Draft SA-21
CCI-003384 Defines the system, system component, or system service which requires the system developer to have appropriate access authorizations, satisfy additional personnel screening criteria, and provide information that the access authorizations and screening criteria are satisfied. Draft SA-21
CCI-003385 Require that the developer of an organization-defined system, system component, or system service has appropriate access authorizations as determined by assigned organization-defined official government duties. Draft SA-21
CCI-003386 Defines the critical system components to re-implement or custom develop. Draft SA-20
CCI-003387 Re-implement or custom develops organization-defined critical system components. Draft SA-20
CCI-003388 The organization defines the frequency on which to scan for counterfeit information system components. Draft SA-19(4)
CCI-003389 The organization scans for counterfeit information system components in accordance with organization-defined frequency. Draft SA-19(4)
CCI-003390 The organization defines the techniques and methods used to dispose of information system components. Draft SA-19(3)