DISA Control Correlation Identifier – CCI-000042 CCI-000042 requires that “The organization documents the rationale for authorized network access to organization-defined privileged commands in the security plan...
DISA Control Correlation Identifier – CCI-000054 CCI-000054 requires that “The information system limits the number of concurrent sessions for each organization-defined account and/or account type to...
DISA Control Correlation Identifier – CCI-000001 CCI-000001 requires that “The organization develops an access control policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among...
DISA Control Correlation Identifier – CCI-000002 CCI-000002 requires that “The organization disseminates the access control policy to organization-defined personnel or roles.” The policy will address purpose,...
DISA Control Correlation Identifier – CCI-000003 CCI-000003 requires that “The organization reviews and updates the access control policy in accordance with organization-defined frequency.” The policy will...
DISA Control Correlation Identifier – CCI-000468 CCI-000468 requires that “The organization communicates contingency plan changes to an organization-defined list of key contingency personnel (identified by name...
DISA Control Correlation Identifier – CCI-000004 CCI-000004 requires that “The organization develops procedures to facilitate the implementation of the access control policy and associated access controls.”...
DISA Control Correlation Identifier – CCI-000005 CCI-000005 requires that “The organization disseminates the procedures to facilitate access control policy and associated access controls to the organization-defined...
DISA Control Correlation Identifier – CCI-000006 CCI-000006 requires that “The organization reviews and updates the access control procedures in accordance with organization-defined frequency.” This Control Correlation...
DISA Control Correlation Identifier – CCI-000007 CCI-000007 requires that “The organization manages information system accounts by identifying account types (i.e., individual, group, system, application, guest/anonymous, and...