An error occurred:

CCIs

Number Definition Status Related
CCI-002101 Authorizes internal connections of organization-defined system components or classes of components to the system. Draft CA-9
CCI-002102 Defines the system components or classes of components that are authorized internal connections to the system. Draft CA-9
CCI-002103 Document, for each internal connection, the interface characteristics. Draft CA-9
CCI-002104 Document, for each internal connection, the security requirements. Draft CA-9
CCI-002105 Document, for each internal connection, the nature of the information communicated. Draft CA-9
CCI-002106 The organization documents the access control policy. Draft AC-1
CCI-002107 Defines the personnel or roles to be recipients of the organization-level; mission/business process-level; and/or system-level access control policy necessary to facilitate the implementation of the access control policy and associated access controls. Draft AC-1
CCI-002108 Defines the personnel or roles to be recipients of the procedures necessary to facilitate the implementation of the organization-level; mission/business process-level; and/or system-level access control policy and associated access controls. Draft AC-1
CCI-002109 The organization documents procedures to facilitate the implementation of the access control policy and associated access controls. Draft AC-1
CCI-002110 The organization defines the information system account types that support the organizational missions/business functions. Draft AC-2
CCI-002111 The organization identifies and selects the organization-defined information system account types of information system accounts which support organizational missions/business functions. Draft AC-2
CCI-002112 Assign account managers. Draft AC-2
CCI-002113 The organization establishes conditions for role membership. Draft AC-2
CCI-002114 The organization specifies authorized users of the information system for each account. Deprecated AC-2
CCI-002115 Specify authorized users of the system. Draft AC-2
CCI-002116 Specify authorized users of the group. Draft AC-2
CCI-002117 Specify authorized users of the role membership. Draft AC-2
CCI-002118 Specify authorized access authorizations (i.e., privileges) for each account. Draft AC-2
CCI-002119 Specify organization-attributes (as required) for each account on the system. Draft AC-2
CCI-002120 Defines the personnel or roles authorized to approve the creation of accounts. Draft AC-2
CCI-002121 Defines the procedures to be employed when creating, enabling, modifying, disabling, and removing information system accounts. Draft AC-2
CCI-002122 Monitor the use of accounts. Draft AC-2
CCI-002123 Notify account managers and organization-defined personnel or roles within an organization-defined time-period when accounts are no longer required. Draft AC-2
CCI-002124 Notify account managers and organization-defined personnel or roles within an organization-defined time-period when users are terminated or transferred. Draft AC-2
CCI-002125 Notify account managers and organization-defined personnel or roles within an organization-defined time-period when system usage or need-to-know changes for an individual. Draft AC-2
CCI-002126 Authorize access to the system based on a valid access authorization. Draft AC-2
CCI-002127 Authorize access to the system based on intended system usage. Draft AC-2
CCI-002128 Authorize access to the system based on organization-defined attributes (as required). Draft AC-2
CCI-002129 Establish and implement a process for changing shared or group account authenticators (if deployed) when individuals are removed from the group. Draft AC-2
CCI-002130 Automatically audit account enabling actions. Draft AC-2(4)