the DoD risk assessment policy. RA-1 RA-1 (a) (2) CCI-001042 High High High NIST SP 800-30 meets the Automatically Moderate Moderate Moderate DoD requirements for compliant with this Low Low Low risk assessment policy CCI because they and procedures. are covered at the DoD level DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy. RA-1 RA-1 (b) (1) CCI-001039 High High High NIST SP 800-30 meets the Automatically Moderate Moderate Moderate DoD requirements for compliant with this Low Low Low risk assessment policy CCI because they and procedures. are covered at the DoD DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy. RA-1 RA-1 (b) (1) CCI-001040 High High High The organization Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they with this CCI because are covered at the they are covered at the DoD level DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance. RA-1 RA-1 (b) (2) CCI-001043 High High High NIST SP 800-30 meets Automatically Moderate Moderate Moderate the DoD requirements compliant with this Low Low Low for risk assessment policy CCI because they and procedures. are covered at the DoD level DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy.
the DoD risk assessment policy. RA-1 RA-1 (a) (2) CCI-001042 High Moderate Low High Moderate Low High Moderate Low NIST SP 800-30 meets the DoD requirements for risk assessment policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy. Automatically compliant with this CCI because they are covered at the DoD level RA-1 RA-1 (b) (1) CCI-001039 High Moderate Low High Moderate Low High Moderate Low NIST SP 800-30 meets the DoD requirements for risk assessment policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy. Automatically compliant with this CCI because they are covered at the DoD RA-1 RA-1 (b) (1) CCI-001040 High Moderate Low High Moderate Low High Moderate Low The organization inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance. Automatically compliant with this CCI because they are covered at the DoD level RA-1 RA-1 (b) (2) CCI-001043 High Moderate Low High Moderate Low High Moderate Low NIST SP 800-30 meets the DoD requirements for risk assessment policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoDi 8510.01 which adopts NIST SP 800-30 as the DoD risk assessment policy. Automatically compliant with this CCI because they are covered at the DoD level