7.0 CENTRAL MANAGEMENT {ACRONYM} is automatically compliant with this requirement because they are covered at the DoD level. DoDI 8500.01, DoDI 8510.01, and CNSSI 1253 meet the DoD requirements for centrally managing security controls and related processes. APPENDIX A DETAILED COMPLIANCE MATRIX – The following table provides traceability between this document and the Assessment Procedures contained within NIST Special Publication 800-53A Revision 4, "Assessing Security and Privacy Controls in Federal Information Systems and Organizations". Control Assessment CCI Confidentiality Integrity Availability Assessment Procedures Reference Number Number PL-1 (a) High High High The organization being Automatically PL-1 Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD level DoD has the roles as Organizational personnel with planning responsibilities or information security responsibilities. PL-1 PL-1 (a) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with Low Low Low automatically compliant with this CCI this CCI because they are because they covered at the DoD level. are covered at the DoD DoD has defined the roles as Organizational personnel with planning responsibilities or information security responsibilities. PL-1 (a) (1) High High High DoD Components are Automatically PL-1 Moderate Moderate Moderate automatically compliant with compliant with Low Low Low this CCI because they are this CCI covered by DoD level policy, because they DoDI 8510.01. are covered at the DoD level
7.0 CENTRAL MANAGEMENT {ACRONYM} is automatically compliant with this requirement because they are covered at the DoD level. DoDI 8500.01, DoDI 8510.01, and CNSSI 1253 meet the DoD requirements for centrally managing security controls and related processes. APPENDIX A – DETAILED COMPLIANCE MATRIX The following table provides traceability between this document and the Assessment Procedures contained within NIST Special Publication 800-53A Revision 4, "Assessing Security and Privacy Controls in Federal Information Systems and Organizations". Control Number Assessment Number CCI Confidentiality Integrity Availability Assessment Procedures Reference PL-1 PL-1 (a) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has the roles as Organizational personnel with planning responsibilities or information security responsibilities. Automatically compliant with this CCI because they are covered at the DoD level PL-1 PL-1 (a) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the roles as Organizational personnel with planning responsibilities or information security responsibilities. Automatically compliant with this CCI because they are covered at the DoD PL-1 PL-1 (a) (1) High Moderate Low High Moderate Low High Moderate Low DoD Components are automatically compliant with this CCI because they are covered by DoD level policy, DoDI 8510.01. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Security-Planning.docx