Assessment Objective

Determine if:

• PM-17a.
  • PM-17a.[01] policy is established to ensure that requirements for the protection of controlled unclassified information that is processed, stored, or transmitted on external systems are implemented in accordance with applicable laws, executive orders, directives, policies, regulations, and standards;
  • PM-17a.[02] procedures are established to ensure that requirements for the protection of controlled unclassified information that is processed, stored, or transmitted on external systems are implemented in accordance with applicable laws, executive orders, directives, policies, regulations, and standards;
• PM-17b.
  • PM-17b.[01] policy is reviewed and updated [Assignment: frequency];
  • PM-17b.[02] procedures are reviewed and updated [Assignment: frequency]

Assessment Methods

Examine

• Controlled unclassified information policy
• controlled unclassified information procedures
• other relevant documents or records.

Interview

• Organizational personnel with controlled unclassified information responsibilities
• organizational personnel with information security responsibilities.

Verknüpfte Vorgänge

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final