PM-6 PM-6 CCI-000210 Low Low Low The Federal Automatically Moderate Moderate Moderate Information Systems compliant High High High Management Act with this CCI (FISMA) meets the because they DoD requirements for are covered at information security the DoD level performance measures of performance. DoD organizations are automatically compliant with this control as they are covered at the DoD level by FISMA. PM-6 PM-6 CCI-000211 Low Low Low The organization Moderate Moderate Moderate conducting the High High High inspection/assessment obtains and examines reporting documentation. PM-7 PM-7 CCI-000212 Low Low Low The GIG IA Automatically Moderate Moderate Moderate Architecture meets compliant High High High the DoD requirements with this CCI for enterprise because they architecture. are covered at the DoD level DoD components are automatically compliant with this CCI as they covered at the DoD level. PM-8 PM-8 CCI-000216 Low Low Low DoDD 3020.40 the Automatically Moderate Moderate Moderate DoD requirement for compliant High High High the development of a with this CCI critical infrastructure because they and key resource are covered at protection plan. the DoD DoD components are automatically compliant with this control as they are covered by the DoD level, DoDD 3020.40. PM-8 PM-8 CCI-001640 Low Low Low DoDD 3020.40 meets Automatically Moderate Moderate Moderate the DoD requirement compliant High High High for the development with this CCI of a critical because they infrastructure and key are covered at resource protection the DoD level plan. DoD components are automatically compliant with this control as they are covered by the DoD level, DoDD 3020.40.
PM-6 PM-6 CCI-000210 Low Moderate High Low Moderate High Low Moderate High The Federal Information Systems Management Act (FISMA) meets the DoD requirements for information security performance measures of performance. DoD organizations are automatically compliant with this control as they are covered at the DoD level by FISMA. Automatically compliant with this CCI because they are covered at the DoD level PM-6 PM-6 CCI-000211 Low Moderate High Low Moderate High Low Moderate High The organization conducting the inspection/assessment obtains and examines reporting documentation. PM-7 PM-7 CCI-000212 Low Moderate High Low Moderate High Low Moderate High The GIG IA Architecture meets the DoD requirements for enterprise architecture. DoD components are automatically compliant with this CCI as they covered at the DoD level. Automatically compliant with this CCI because they are covered at the DoD level PM-8 PM-8 CCI-000216 Low Moderate High Low Moderate High Low Moderate High DoDD 3020.40 the DoD requirement for the development of a critical infrastructure and key resource protection plan. DoD components are automatically compliant with this control as they are covered by the DoD level, DoDD 3020.40. Automatically compliant with this CCI because they are covered at the DoD PM-8 PM-8 CCI-001640 Low Moderate High Low Moderate High Low Moderate High DoDD 3020.40 meets the DoD requirement for the development of a critical infrastructure and key resource protection plan. DoD components are automatically compliant with this control as they are covered by the DoD level, DoDD 3020.40. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Program-Management-Plan.docx