inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 145. AU-5 (3) AU-5 (3) blank The organization being Automatically inspected/assessed is compliant automatically compliant with this CCI with this CCI because they because they are covered at the DoD are covered at level. the DoD level DoD has defined the action to take as delay. AU-5 (3) AU-5 (3) blank blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, examines the information this AP is not system to ensure the applicable. organization being inspected/assessed configures the information system to delay network communications traffic exceeding the thresholds defined in AU-5 (3), CCI 1859. DoD has defined the action to take as delay. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1574. AU-5 (4) AU-5 (4) blank blank blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, obtains and examines the this AP is not documented system mode applicable. to ensure the organization
inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 145. AU-5 (3) AU-5 (3) blank The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the action to take as delay. Automatically compliant with this CCI because they are covered at the DoD level AU-5 (3) AU-5 (3) blank blank blank The organization conducting the inspection/assessment examines the information system to ensure the organization being inspected/assessed configures the information system to delay network communications traffic exceeding the thresholds defined in AU-5 (3), CCI 1859. DoD has defined the action to take as delay. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1574. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-5 (4) AU-5 (4) blank blank blank The organization conducting the inspection/assessment obtains and examines the documented system mode to ensure the organization NIST has not allocated this AP. Therefore, this AP is not applicable.