PL-1 PL-1 (a) (1) High High High DoD Components are Automatically Moderate Moderate Moderate automatically compliant with compliant with Low Low Low this CCI because they are this CCI covered by DoD level policy, because they DoDI 8510.01. are covered at the DoD level DoD has defined the roles as organizational personnel with planning responsibilities or information security responsibilities. PL-1 PL-1 (a) (2) High High High DoD Components are Automatically Moderate Moderate Moderate automatically compliant with compliant with Low Low Low this CCI because they are this CCI covered by DoD level policy, because they DoDI 8510.01. are covered at the DoD level PL-1 PL-1 (b) (1) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD level DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance. PL-1 PL-1 (b) (1) High High High DoDI 8510.01 meets the Automatically Moderate Moderate Moderate requirements for a security compliant with Low Low Low planning policy. this CCI because they DoD Components are are covered at automatically compliant with the DoD level this CCI because they are covered by DoD level policy, DoDI 8510.01. DoD has defined the frequency as every 5 years. PL-1 PL-1 (b) (2) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD DoD has defined the frequency as reviewed annually - updated as appropriate.
PL-1 PL-1 (a) (1) High Moderate Low High Moderate Low High Moderate Low DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01. DoD has defined the roles as organizational personnel with planning responsibilities or information security responsibilities. Automatically compliant with this CCI because they are covered at the DoD level PL-1 PL-1 (a) (2) High Moderate Low High Moderate Low High Moderate Low DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01. Automatically compliant with this CCI because they are covered at the DoD level PL-1 PL-1 (b) (1) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate but at least within 10 years of date of issuance. Automatically compliant with this CCI because they are covered at the DoD level PL-1 PL-1 (b) (1) High Moderate Low High Moderate Low High Moderate Low DoDI 8510.01 meets the requirements for a security planning policy. DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01. DoD has defined the frequency as every 5 years. Automatically compliant with this CCI because they are covered at the DoD level PL-1 PL-1 (b) (2) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate. Automatically compliant with this CCI because they are covered at the DoD
RMF_Security-Planning.docx