PM-1 PM-1 (a) (4) CCI-002988 Low Low Low DoD components are Automatically Moderate Moderate Moderate automatically compliant High High High compliant with this with this CCI CCI as they are because they covered at the DoD are covered at level by DoDI 8500.01 the DoD level and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan. PM-1 PM-1 (b) CCI-000076 Low Low Low The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant High High High automatically with this CCI compliant with this because they CCI because they are are covered at covered at the DoD the DoD level level. DoD has defined the frequency as reviewed annually - updated as appropriate. PM-1 PM-1 (b) CCI-000075 Low Low Low DoD components are Automatically Moderate Moderate Moderate automatically compliant High High High compliant with this with this CCI CCI as they are because they covered at the DoD are covered at level by DoDI 8500.01 the DoD level and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan. PM-1 PM-1 (c) CCI-000077 Low Low Low DoD components are Automatically Moderate Moderate Moderate automatically compliant High High High compliant with this with this CCI CCI as they are because they covered at the DoD are covered at level by DoDI 8500.01 the DoD level and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan.
PM-1 PM-1 (a) (4) CCI-002988 Low Moderate High Low Moderate High Low Moderate High DoD components are automatically compliant with this CCI as they are covered at the DoD level by DoDI 8500.01 and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan. Automatically compliant with this CCI because they are covered at the DoD level PM-1 PM-1 (b) CCI-000076 Low Moderate High Low Moderate High Low Moderate High The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as reviewed annually - updated as appropriate. Automatically compliant with this CCI because they are covered at the DoD level PM-1 PM-1 (b) CCI-000075 Low Moderate High Low Moderate High Low Moderate High DoD components are automatically compliant with this CCI as they are covered at the DoD level by DoDI 8500.01 and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan. Automatically compliant with this CCI because they are covered at the DoD level PM-1 PM-1 (c) CCI-000077 Low Moderate High Low Moderate High Low Moderate High DoD components are automatically compliant with this CCI as they are covered at the DoD level by DoDI 8500.01 and the Knowledge Service. If the organization or system owner is utilizing common controls, they must be documented in their Security Plan. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Program-Management-Plan.docx