💼 CA-1 SECURITY ASSESSMENT AND AUTHORIZATION POLICY AND PROCEDURES

• ID: /frameworks/nist-sp-800-53-r4/ca/01

Description

The organization: CA-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: CA-1a.1. A security assessment and authorization policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and CA-1a.2. Procedures to facilitate the implementation of the security assessment and authorization policy and associated security assessment and authorization controls; and CA-1b. Reviews and updates the current: CA-1b.1. Security assessment and authorization policy [Assignment: organization-defined frequency]; and CA-1b.2. Security assessment and authorization procedures [Assignment: organization-defined frequency].

Similar

• Internal
  • ID: dec-c-4d1ab582

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 NIST CSF v1.1 → 💼 ID.GV-1: Organizational cybersecurity policy is established and communicated					no data
💼 NIST CSF v1.1 → 💼 ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed		1	4		no data

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance