An error occurred:

CCIs

Number Definition Status Related
CCI-005042 Defines the systems or system components used to determine if organizational data has been exfiltrated or improperly removed from the organization. Draft SI-20
CCI-005043 Refresh organization-defined information at organization-defined frequencies or generate the information on demand and delete the information when no longer needed. Draft SI-21
CCI-005044 Defines the information to be refreshed at organization-defined frequencies or generate the information on demand and delete the information when no longer needed. Draft SI-21
CCI-005045 Defines the frequencies for refreshing organization-defined information. Draft SI-21
CCI-005046 Identify the following alternate sources of information for organization-defined essential functions and services. Draft SI-22
CCI-005047 Defines the alternative information sources for identifying organization-defined essential functions and services. Draft SI-22
CCI-005048 Use an alternate information source for the execution of essential functions or services on organization-defined systems or system components when the primary source of information is corrupted or unavailable. Draft SI-22
CCI-005049 Defines the systems or system components used as an alternate information source for the execution of essential functions or services when the primary source of information is corrupted or unavailable. Draft SI-22
CCI-005050 Based on organization-defined circumstances, fragment the following information. Draft SI-23
CCI-005051 Defines the information for fragmentation. Draft SI-23
CCI-005052 Defines the circumstances for fragmenting organization-defined information. Draft SI-23
CCI-005053 Based on organization-defined circumstances, distribute the fragmented information across the following systems or system components. Draft SI-23
CCI-005054 Defines the systems or system components used to distribute fragmented information. Draft SI-23
CCI-005055 Defines the circumstances for distributing fragmented information across organization-defined systems or system components. Draft SI-23
CCI-005056 Disseminate an organization-level, mission/business process-level, and/or system-level supply chain risk management policy to organization-defined personnel or roles. Draft SR-1
CCI-005057 Develop and document an organization-level, mission/business process-level, and/or system-level supply chain risk management policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance. Draft SR-1
CCI-005058 Develop and document organization-level, mission/business process-level, and/or system-level supply chain risk management policy that is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Draft SR-1
CCI-005059 Develop and document procedures to facilitate the implementation of the supply chain risk management policy and the associated supply chain risk management controls. Draft SR-1
CCI-005060 Designate an organization-defined official to manage the development and documentation of the supply chain risk management policy. Draft SR-1
CCI-005061 Designate an organization-defined official to manage the development and documentation of the supply chain risk management procedures. Draft SR-1
CCI-005062 Designate an organization-defined official to manage the dissemination of the supply chain risk management policy. Draft SR-1
CCI-005063 Designate an organization-defined official to manage the dissemination of the supply chain risk management procedures. Draft SR-1
CCI-005064 Review and update the current supply chain risk management policy on an organization-defined frequency. Draft SR-1
CCI-005065 Defines the frequency for reviewing and updating the current supply chain risk management policy. Draft SR-1
CCI-005066 Review and update the current supply chain risk management policy following organization-defined events. Draft SR-1
CCI-005067 Defines the events following reviewing and updating the current supply chain risk management policy. Draft SR-1
CCI-005068 Review and update the current supply chain risk management procedures on an organization-defined frequency. Draft SR-1
CCI-005069 Defines the frequency for reviewing and updating the current supply chain risk management procedures. Draft SR-1
CCI-005070 Review and update the current supply chain risk management procedures following organization-defined events. Draft SR-1
CCI-005071 Defines the events following reviewing and updating the current supply chain risk management procedures. Draft SR-1