An error occurred:

CCIs

Number Definition Status Related
CCI-004022 Protect the confidentiality of backup information. Draft
CCI-004023 Protect integrity of backup information. Draft
CCI-004024 Protect the availability of backup information. Draft
CCI-004025 Implement cryptographic mechanisms to prevent unauthorized disclosure of organization-defined backup information. Draft
CCI-004026 Implement cryptographic mechanisms to prevent unauthorized modification of organization-defined backup information. Draft
CCI-004027 Defines the backup information which is protected by cryptographic mechanisms preventing unauthorized disclosure and modification. Draft
CCI-004028 Provide for the recovery and reconstitution of the system to a known state within an organization-defined time-period consistent with recovery time and recovery point objectives after a disruption, compromise, or failure. Draft
CCI-004029 Defines the time-period consistent with recovery time and recovery point objectives for the recovery and reconstitution of the system. Draft
CCI-004030 Protect system components used for recovery and reconstitution. Draft
CCI-004031 Defines the personnel or roles the organization-level; mission/business process-level; and/or system-level identification and authorization policy is disseminated to. Draft
CCI-004032 Develop and document an organization-level; mission/business process-level; and/or system-level identification and authorization policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination, among organizational entities, and compliance. Draft
CCI-004033 Develop and document an organization-level; mission/business process-level; and/or system-level identification and authorization policy that is consistent with applicable laws, Executive Orders, directives, regulations, policies, standards, and guidelines. Draft
CCI-004034 Develop and document the procedures to facilitate the implementation of the identification and authorization policy and the associated identification and authentication controls. Draft
CCI-004035 Designate an organization-defined official to manage development and documentation of the identification and authentication policy. Draft
CCI-004036 Designate an organization-defined official to manage dissemination of the identification and authentication policy. Draft
CCI-004037 Designate an organization-defined official to manage development and documentation of the identification and authentication procedures. Draft
CCI-004038 Designate an organization-defined official to manage dissemination of the identification and authentication procedures. Draft
CCI-004039 Defines the official designated to managing the development, documentation, and dissemination of the identification and authentication policy. Draft
CCI-004040 Defines the official designated to managing the development, documentation, and dissemination of the identification and authentication procedures. Draft
CCI-004041 Review and update the current identification and authentication policy following organization-defined events. Draft
CCI-004042 Defines the events following reviewing and updating the current identification and authentication policy. Draft
CCI-004043 Review and update the current identification and authentication procedures following organization-defined events. Draft
CCI-004044 Defines the events following reviewing and updating the current identification and authentication procedures. Draft
CCI-004045 Require users to be individually authenticated before granting access to the shared accounts or resources. Draft
CCI-004046 Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access. Draft
CCI-004047 Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that the device meets organization-defined strength of mechanism requirements. Draft
CCI-004048 Defines the strength of mechanism requirements for implementing multi-factor authentication. Draft
CCI-004049 Defines the dynamic identifier policy for managing individual identifiers dynamically. Draft
CCI-004050 Generate pairwise pseudonymous identifiers. Draft
CCI-004051 Maintain the attributes for each uniquely identified individual, device, or service in organization-defined protected central storage. Draft