An error occurred:

CCIs

Number Definition Status Related
CCI-003932 After system changes, verify that the impacted controls are implemented correctly, meeting the privacy requirements for the system. Draft
CCI-003933 After system changes, verify that the impacted controls are operating as intended, meeting the privacy requirements for the system. Draft
CCI-003934 After system changes, verify that the impacted controls are producing the desired outcome with regard to meeting the privacy requirements for the system. Draft
CCI-003935 Define and document physical access restrictions associated with changes to the system. Draft
CCI-003936 Define and document logical access restrictions associated with changes to the system. Draft
CCI-003937 Defines the automated mechanisms to enforce access restrictions. Draft
CCI-003938 Automatically generate audit records of the enforcement actions. Draft
CCI-003939 Defines the frequency with which to review and reevaluate system privileges. Draft
CCI-003940 Review and reevaluate system privileges per an organization-defined frequency. Draft
CCI-003941 Establish and document configuration settings for components employed within the system that reflect the most restrictive mode consistent with operational requirements using organization-defined common secure configurations. Draft
CCI-003942 Defines the common secure configurations for establishing and documenting configuration settings within the system, that reflect the most restrictive mode consistent with operational requirements. Draft
CCI-003943 Monitor changes to the configuration settings in accordance with organizational policies. Draft
CCI-003944 Monitor changes to the configuration settings in accordance with organizational procedures. Draft
CCI-003945 Control changes to the configuration settings in accordance with organizational policies. Draft
CCI-003946 Control changes to the configuration settings in accordance with organizational procedures. Draft
CCI-003947 Defines the automated mechanisms for managing, applying, and verifying configuration settings. Draft
CCI-003948 Defines the mission essential capabilities for configuring the system. Draft
CCI-003949 Require that organization-defined user-installed software in a confined physical or virtual machine environment with limited privileges. Draft
CCI-003950 Defines the user-installed software required for executing in a confined physical or virtual machine environment with limited privileges. Draft
CCI-003951 Allow execution of binary or machine-executable code only in confined physical or virtual machine environments and with the explicit approval of organization-defined personnel or roles when such code is obtained from sources with limited or no warranty. Draft
CCI-003952 Defines the personnel or roles who allow execution of binary or machine-executable code only in confined physical or virtual machine environments when such code is obtained from sources with limited or no warranty. Draft
CCI-003953 Allow execution of binary or machine-executable code only in confined physical or virtual machine environments and with the explicit approval of organization-defined personnel or roles when such code is without the provision of source code. Draft
CCI-003954 Defines the personnel or roles who allow execution of binary or machine-executable code only in confined physical or virtual machine environments when such code is without the provision of source code. Draft
CCI-003955 Prohibit the use of binary or machine-executable code from sources with limited or no warranty or without the provision of source code. Draft
CCI-003956 Allow exceptions only for compelling mission or operational requirements and with the approval of the authorizing official. Draft
CCI-003957 Identify organization-defined hardware components authorized for system use. Draft
CCI-003958 Defines the hardware components to be identified for authorized system use. Draft
CCI-003959 Prohibit the use or connection of unauthorized hardware components. Draft
CCI-003960 Review and update the list of authorized hardware components on an organization-defined frequency. Draft
CCI-003961 Defines the frequency the hardware components are reviewed and updated. Draft