SA-19 SA-19 (2) CCI-003370 blank blank blank The organization conducting NIST has not (2) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented information AP is not system components to applicable. ensure the organization being inspected/assessed defines the information system components awaiting service/repair in which configuration control must be maintained. DoD has determined the information system components are not appropriate to define at the Enterprise level. SA-19 SA-19 (2) CCI-003371 blank blank The organization conducting NIST has not (2) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented process to AP is not ensure the organization applicable. being inspected/assessed maintains configuration control over serviced/repaired components awaiting return to service. SA-19 SA-19 (3) CCI-003391 blank blank The organization conducting NIST has not (3) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented process as well AP is not as the record of disposal to applicable. ensure the organization inspected/assessed disposes of information system components using techniques and methods defined IAW DoD Manual 5200.01. DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01. Automatically SA-19 SA-19 (3) CCI-003390 blank blank The organization being (3) inspected/assessed is compliant with automatically compliant with this CCI because this CCI because they are they are covered covered at the DoD level. at the DoD level DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01. SA-19 SA-19 (4) CCI-003388 blank blank blank The organization conducting NIST has not (4) the inspection/assessment allocated this AP. obtains and examines the Therefore, this documented frequency to AP is not ensure the organization applicable. being inspected/assessed
SA-19 (2) SA-19 (2) CCI-003370 blank blank blank The organization conducting the inspection/assessment obtains and examines the documented information system components to ensure the organization being inspected/assessed defines the information system components awaiting service/repair in which configuration control must be maintained. DoD has determined the information system components are not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-19 (2) SA-19 (2) CCI-003371 blank blank The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed maintains configuration control over serviced/repaired components awaiting return to service. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-19 (3) SA-19 (3) CCI-003391 blank blank The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of disposal to ensure the organization inspected/assessed disposes of information system components using techniques and methods defined IAW DoD Manual 5200.01. DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01. NIST has not allocated this AP. Therefore, this AP is not applicable. SA-19 (3) SA-19 (3) CCI-003390 blank blank The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the techniques and methods as defined IAW DoD Manual 5200.01. Automatically compliant with this CCI because they are covered at the DoD level SA-19 (4) SA-19 (4) CCI-003388 blank blank blank The organization conducting the inspection/assessment obtains and examines the documented frequency to ensure the organization being inspected/assessed NIST has not allocated this AP. Therefore, this AP is not applicable.
RMF_System-and-Services-Acquisition-Plan.docx