Control Assessment CCI Confidentiality Integrity Availability Assessment Procedures Reference Number Number MA-1 MA-1 (a) High High High The being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they are with this CCI because covered at the DoD they are covered at the level DoD level. DoD has defined the personnel or roles as the SCA, ISSO, and maintenance personnel as needed by role in maintaining the system. MA-1 MA-1 (a) High High High The organization being Automatically Moderate Moderate Moderate inspected/assessed is compliant with this Low Low Low automatically compliant CCI because they are with this CCI because covered at the DoD they are covered at the level DoD level. DoD has defined the personnel or roles as the SCA, ISSO, and maintenance personnel as needed by role in maintaining the system. MA-1 MA-1 (a) (1) High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines the documented maintenance policy to ensure the organization inspected/assessed develops and documents a system maintenance policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.
Control Number Assessment Number CCI Confidentiality Integrity Availability Assessment Procedures Reference MA-1 MA-1 (a) High Moderate Low High Moderate Low High Moderate Low The being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as the SCA, ISSO, and maintenance personnel as needed by role in maintaining the system. Automatically compliant with this CCI because they are covered at the DoD level MA-1 MA-1 (a) High Moderate Low High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as the SCA, ISSO, and maintenance personnel as needed by role in maintaining the system. Automatically compliant with this CCI because they are covered at the DoD level MA-1 MA-1 (a) (1) High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the documented maintenance policy to ensure the organization inspected/assessed develops and documents a system maintenance policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.
RMF_Information-System-Maintenance-Plan.docx