An error occurred:

CCIs

Number Definition Status Related
CCI-001141 The organization produces, controls, and distributes symmetric and asymmetric cryptographic keys using NSA-approved key management technology and processes. Draft
CCI-001142 The organization produces, controls, and distributes asymmetric cryptographic keys using approved PKI Class 3 certificates or prepositioned keying material. Draft
CCI-001143 The organization produces, controls, and distributes asymmetric cryptographic keys using approved PKI Class 3 or Class 4 certificates and hardware security tokens that protect the user's private key. Draft
CCI-001144 The information system implements required cryptographic protections using cryptographic modules that comply with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. Draft
CCI-001145 The organization employs, at a minimum, FIPS-validated cryptography to protect unclassified information. Draft
CCI-001146 The organization employs NSA-approved cryptography to protect classified information. Draft
CCI-001147 The organization employs, at a minimum, FIPS-validated cryptography to protect information when such information must be separated from individuals who have the necessary clearances yet lack the necessary access approvals. Draft
CCI-001148 The organization employs FIPS-validated or NSA-approved cryptography to implement digital signatures. Draft
CCI-001149 The information system protects the integrity and availability of publicly available information and applications. Draft
CCI-001150 Prohibit remote activation of collaborative computing devices and applications, excluding the organization-defined exceptions where remote activation is to be allowed. Draft SC-15
CCI-001151 Defines exceptions to the prohibition of collaborative computing devices where remote activation is to be allowed. Draft SC-15
CCI-001152 Provide an explicit indication of use to users physically present at collaborative computing devices. Draft SC-15
CCI-001153 Provide physical or logical disconnect of collaborative computing devices in a manner that supports ease of use. Draft SC-15(1)
CCI-001154 The information system or supporting environment blocks both inbound and outbound traffic between instant messaging clients that are independently configured by end users and external service providers. Draft
CCI-001155 Disable or remove collaborative computing devices and applications from organization-defined systems or system components in organization-defined secure work areas. Draft SC-15(3)
CCI-001156 Defines secure work areas where collaborative computing devices and applications are to be disabled or removed. Draft SC-15(3)
CCI-001157 Associate organization-defined security attributes with information exchanged between systems. Draft SC-16
CCI-001158 Verify the integrity of transmitted security attributes. Draft SC-16(1)
CCI-001159 Issue public key certificates under an organization-defined certificate policy or obtain public key certificates from an approved service provider. Draft SC-17
CCI-001160 Defines acceptable and unacceptable mobile code and mobile code technologies. Draft SC-18
CCI-001161 The organization establishes usage restrictions for acceptable mobile code and mobile code technologies. Draft SC-18
CCI-001162 The organization establishes implementation guidance for acceptable mobile code and mobile code technologies. Draft SC-18
CCI-001163 Authorize the use of mobile code within the system. Draft SC-18
CCI-001164 Monitor the use of mobile code within the system. Draft SC-18
CCI-001165 Control the use of mobile code within the system. Draft SC-18
CCI-001166 Identify organization-defined unacceptable mobile code. Draft SC-18(1)
CCI-001167 Verify that the development of mobile code to be deployed in information systems meets organization-defined mobile code requirements. Draft SC-18(2)
CCI-001168 Defines mobile code requirements for the acquisition, development, and use of mobile code. Draft SC-18(2)
CCI-001169 Prevent the download of organization-defined unacceptable mobile code. Draft SC-18(3)
CCI-001170 Prevents the automatic execution of mobile code in organization-defined software applications. Draft SC-18(4)