The following table provides traceability between this document and the Assessment Procedures contained within NIST Special Publication 800-53A Revision 4, "Assessing Security and Privacy Controls in Federal Information Systems and Organizations". Control Assessment CCI Confidentiality Integrity Availability Assessment Procedures Reference Number Number CP-1 CP-1 (a) (1) CCI-002825 High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level. DoD has defined the personnel or roles as all stakeholders identified in the contingency plan. CP-1 CP-1 (a) (1) CCI-000438 High High High DoDI 8500.01 and NIST SP Automatically Moderate Moderate Moderate 800-34 meet the DoD compliant with this Low Low Low requirements for CCI because they are contingency planning covered at the DoD policy and procedures. DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP CP-1 CP-1 (a) (1) CCI-000439 High High High DoD Components are Automatically Moderate Moderate Moderate automatically compliant compliant with this Low Low Low with this control because CCI because they are they are covered by the covered at the DoD DoD level policy, DoDI level 8500.01 and NIST SP CP-1 CP-1 (a) (2) CCI-002826 High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level. DoD has defined the personnel or roles as all stakeholders identified in the contingency plan. CP-1 CP-1 (a) (2) CCI-000441 High High High DoDI 8500.01 and NIST SP Automatically Moderate Moderate Moderate 800-34 meet the DoD compliant with this Low Low Low requirements for CCI because they are contingency planning covered at the DoD policy and procedures. level DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP
The following table provides traceability between this document and the Assessment Procedures contained within NIST Special Publication 800-53A Revision 4, "Assessing Security and Privacy Controls in Federal Information Systems and Organizations". Control Number Assessment Number CCI Confidentiality Integrity Availability Assessment Procedures Reference CP-1 CP-1 (a) (1) CCI-002825 High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as all stakeholders identified in the contingency plan. Automatically compliant with this CCI because they are covered at the DoD CP-1 CP-1 (a) (1) CCI-000438 High Moderate Low High Moderate Low High Moderate Low DoDI 8500.01 and NIST SP 800-34 meet the DoD requirements for contingency planning policy and procedures. DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP Automatically compliant with this CCI because they are covered at the DoD CP-1 CP-1 (a) (1) CCI-000439 High Moderate Low High Moderate Low High Moderate Low DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP Automatically compliant with this CCI because they are covered at the DoD level CP-1 CP-1 (a) (2) CCI-002826 High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as all stakeholders identified in the contingency plan. Automatically compliant with this CCI because they are covered at the DoD CP-1 CP-1 (a) (2) CCI-000441 High Moderate Low High Moderate Low High Moderate Low DoDI 8500.01 and NIST SP 800-34 meet the DoD requirements for contingency planning policy and procedures. DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8500.01 and NIST SP Automatically compliant with this CCI because they are covered at the DoD level
RMF_Contingency-Plan.docx