CA-3 (5) CA-3 (5) High High The organization being Automatically Moderate Moderate inspected/assessed is compliant Low Low automatically compliant with this CCI with this CCI because because they they are covered at the are covered DoD level. at the DoD level DoD has defined the information systems as any systems requiring external connectivity.
CA-3 (5) CA-3 (5) High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the information systems as any systems requiring external connectivity. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Security-Assessment-and-Authorization-Plan.docx