An error occurred:

CCIs

Number Definition Status Related
CCI-005132 Develop and document anti-counterfeit policy that include the means to detect and prevent counterfeit components from entering the system. Draft
CCI-005133 Develop and document anti-counterfeit procedures that include the means to detect and prevent counterfeit components from entering the system. Draft
CCI-005134 Report counterfeit system components to source of counterfeit component, organization-defined external reporting organizations, and/or organization-defined personnel or roles. Draft
CCI-005135 Defines the external reporting organizations who report counterfeit system components. Draft
CCI-005136 Defines the personnel or roles who report counterfeit system components. Draft
CCI-005137 Train organization-defined personnel or roles to detect counterfeit system components including hardware, software, and firmware. Draft
CCI-005138 Defines the personnel or roles who are trained to detect counterfeit system components (including hardware, software, and firmware). Draft
CCI-005139 Maintain configuration control over the following system components awaiting service or repair. Draft
CCI-005140 Maintain configuration control over serviced or repaired components awaiting return to service. Draft
CCI-005141 Defines the system components awaiting service or repair. Draft
CCI-005142 Scan for counterfeit system components on an organization-defined frequency. Draft
CCI-005143 Defines the frequency for which the counterfeit system components are scanned. Draft
CCI-005144 Dispose of organization-defined data, documentation, tools, or system components using the following techniques and methods. Draft
CCI-005145 Defines the data, documentation, tools, or system components which are to be disposed of using organization-defined techniques and methods. Draft
CCI-005146 Defines the techniques or methods used to dispose of organization-defined data, documentation, tools, or system components. Draft
CCI-005147 Provide basic privacy literacy training to system users (including managers, senior executives, and contractors) as part of initial training for new users. Draft
CCI-005149 Implement organization-defined measures to disassociate individuals from audit information transmitted across organizational boundaries. Draft
CCI-005150 Identify, prioritize, and assess suppliers of critical or mission-essential technologies, products, and services. Draft
CCI-005151 Review and update incident response training content at an organization-defined frequency and following organization-defined events. Draft
CCI-005152 Defines the frequency to review and update incident response training content. Draft
CCI-005153 Defines events that require the review and update of incident response training content. Draft
CCI-005154 Increase the availability of incident response information and support using organization-defined automated mechanisms. Draft
CCI-005155 Employ identity providers and authorization servers to manage user, device, and non-person entity (NPE) identities, attributes, and access rights supporting authentication and authorization decisions in accordance with organization-defined identification and authentication policy using organization-defined mechanisms. Draft
CCI-005156 Cryptographic keys that protect access tokens are generated, managed, and protected from disclosure and misuse. Draft
CCI-005157 The private keys used to sign assertions and tokens are protected commensurate with the impact of the system and information resources that can be accessed. Draft
CCI-005158 Assertions are generated in accordance with organization-defined identification and authentication policy. Draft
CCI-005159 Assertions are issued in accordance with organization-defined identification and authentication policy. Draft
CCI-005160 Assertions are refreshed in accordance with organization-defined identification and authentication policy. Draft
CCI-005161 Assertions are revoked in accordance with organization-defined identification and authentication policy. Draft
CCI-005162 Assertions are time-restricted in accordance with organization-defined identification and authentication policy. Draft