CA-1 CA-1 (b) (1) High High High DoDI 8510.01 meets the Automatically Moderate Moderate Moderate DoD requirement for compliant Low Low Low security assessment with this CCI authorization policy and because they procedures. are covered at the DoD DoD Components are level automatically compliant with this control because they are covered by the DoD level policy, DoDI 8510.01. CA-1 CA-1 (b) (2) High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines the trail of review and update activity to ensure the organization being inspected/assessed reviews and updates, IAW DoDI 8510.01, the current security assessment and authorization procedures annually. CA-1 CA-1 (b) (2) High High High The organization Automatically Moderate Moderate Moderate inspected/assessed is compliant Low Low Low automatically compliant with this CCI with this CCI because because they they are covered at the are covered DoD level. at the DoD level DoD has defined the frequency as annually. CA-2 (1) CA-2 (1) High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines the level of independence defined in CA-2 (1), CCI 2064 to ensure that they, as the assessor, meet the required level of independence.
CA-1 CA-1 (b) (1) High Moderate Low High Moderate Low High Moderate Low DoDI 8510.01 meets the DoD requirement for security assessment authorization policy and procedures. DoD Components are automatically compliant with this control because they are covered by the DoD level policy, DoDI 8510.01. Automatically compliant with this CCI because they are covered at the DoD level CA-1 CA-1 (b) (2) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the trail of review and update activity to ensure the organization being inspected/assessed reviews and updates, IAW DoDI 8510.01, the current security assessment and authorization procedures annually. CA-1 CA-1 (b) (2) High Moderate Low High Moderate Low High Moderate Low The organization inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually. Automatically compliant with this CCI because they are covered at the DoD level CA-2 (1) CA-2 (1) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the level of independence defined in CA-2 (1), CCI 2064 to ensure that they, as the assessor, meet the required level of independence.
RMF_Security-Assessment-and-Authorization-Plan.docx