An error occurred:

CCIs

Number Definition Status Related
CCI-001921 The organization defines the alternative audit functionality to be provided in the event of a failure in the primary audit capability. Draft AU-15
CCI-001922 The organization provides an alternative audit capability in the event of a failure in primary audit capability that provides organization-defined alternative audit functionality. Draft AU-15
CCI-001923 Defines the audit information to be coordinated among external organizations when audit information is transmitted across organizational boundaries. Draft AU-16
CCI-001924 Defines the methods to be employed when coordinating audit information among external organizations when audit information is transmitted across organizational boundaries. Draft AU-16
CCI-001925 Employ organization-defined methods for coordinating organization-defined audit information among external organizations when audit information is transmitted across organizational boundaries. Draft AU-16
CCI-001926 Preserve the identity of individuals in cross-organizational audit trails. Draft AU-16(1)
CCI-001927 Defines the organizations that will be provided cross-organizational audit information. Draft AU-16(2)
CCI-001928 Defines the cross-organizational sharing agreements to be established with organization-defined organizations authorized to be provided cross-organizational sharing of audit information. Draft AU-16(2)
CCI-001929 Provide cross-organizational audit information to organization-defined organizations based on organization-defined cross organizational sharing agreements. Draft AU-16(2)
CCI-001930 Defines the personnel or roles to whom the organization-level; mission/business process-level; and/or system-level audit and accountability policy is to be disseminated. Draft AU-1
CCI-001931 Defines the personnel or roles to whom the audit and accountability procedures are to be disseminated. Draft AU-1
CCI-001932 The organization documents an identification and authentication policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance. Draft IA-1
CCI-001933 The organization defines the personnel or roles to be recipients of the identification and authentication policy and the procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls. Draft IA-1
CCI-001934 The organization documents procedures to facilitate the implementation of the identification and authentication policy and associated identification and authentication controls. Draft IA-1
CCI-001935 The organization defines the strength of mechanism requirements for the device that is separate from the system gaining access to privileged accounts. Draft IA-2(6)
CCI-001936 The information system implements multifactor authentication for network access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access. Draft IA-2(6)
CCI-001937 The device used in the information system implementation of multifactor authentication for network access to privileged accounts meets organization-defined strength of mechanism requirements. Draft IA-2(6)
CCI-001938 The organization defines the strength of mechanism requirements for the device that is separate from the system gaining access to non-privileged accounts. Draft IA-2(7)
CCI-001939 The information system implements multifactor authentication for network access to non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access. Draft IA-2(7)
CCI-001940 The device used in the information system implementation of multifactor authentication for network access to non-privileged accounts meets organization-defined strength of mechanism requirements. Draft IA-2(7)
CCI-001941 Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts. Draft IA-2(8)
CCI-001942 The information system implements replay-resistant authentication mechanisms for network access to non-privileged accounts. Draft IA-2(9)
CCI-001943 Defines the system accounts for which single sign-on capability will be provided. Draft IA-2(10)
CCI-001944 Defines the system services for which single sign-on capability will be provided. Draft IA-2(10)
CCI-001945 Provide a single sign-on capability for organization-defined system accounts. Draft IA-2(10)
CCI-001946 Provide a single sign-on capability for organization-defined system services. Draft IA-2(10)
CCI-001947 The organization defines the strength of mechanism requirements for the device that is separate from the system gaining access and is to provide one factor of a multifactor authentication for remote access to privileged accounts. Draft IA-2(11)
CCI-001948 The information system implements multifactor authentication for remote access to privileged accounts such that one of the factors is provided by a device separate from the system gaining access. Draft IA-2(11)
CCI-001949 The device used in the information system implementation of multifactor authentication for remote access to privileged accounts meets organization-defined strength of mechanism requirements. Draft IA-2(11)
CCI-001950 The organization defines the strength of mechanism requirements for the device that is separate from the system gaining access and is to provide one factor of a multifactor authentication for remote access to non-privileged accounts. Draft IA-2(11)