PM-9 PM-9 (a) CCI-000227 Low Low Low DoD Risk Management Automatically Moderate Moderate Moderate Framework the compliant High High High requirement for a with this CCI comprehensive because they organizational risk are covered at strategy. the DoD level DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). PM-9 PM-9 (b) CCI-000228 Low Low Low DoD Risk Management Automatically Moderate Moderate Moderate Framework meets the compliant High High High requirement for a with this CCI comprehensive because they organizational risk are covered at strategy. the DoD level DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). PM-9 PM-9 (c ) CCI-002994 Low Low Low DoD Risk Management Automatically Moderate Moderate Moderate Framework meets the compliant High High High requirement for a with this CCI comprehensive because they organizational risk are covered at strategy. the DoD DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). PM-9 PM-9 (c ) CCI-002995 Low Low Low The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant High High High automatically with this CCI compliant with this because they CCI because they are are covered at covered at the DoD the DoD level level. DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance
PM-9 PM-9 (a) CCI-000227 Low Moderate High Low Moderate High Low Moderate High DoD Risk Management Framework the requirement for a comprehensive organizational risk strategy. DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). Automatically compliant with this CCI because they are covered at the DoD level PM-9 PM-9 (b) CCI-000228 Low Moderate High Low Moderate High Low Moderate High DoD Risk Management Framework meets the requirement for a comprehensive organizational risk strategy. DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). Automatically compliant with this CCI because they are covered at the DoD level PM-9 PM-9 (c ) CCI-002994 Low Moderate High Low Moderate High Low Moderate High DoD Risk Management Framework meets the requirement for a comprehensive organizational risk strategy. DoD components are automatically compliant with this CCI because they are covered by DoD Risk Management Framework (DoDI 8510.01). Automatically compliant with this CCI because they are covered at the DoD PM-9 PM-9 (c ) CCI-002995 Low Moderate High Low Moderate High Low Moderate High The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance Automatically compliant with this CCI because they are covered at the DoD level