Skip to main content

πŸ’Ό CA-1 SECURITY ASSESSMENT AND AUTHORIZATION POLICY AND PROCEDURES

Description​

The organization: CA-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: CA-1a.1. A security assessment and authorization policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and CA-1a.2. Procedures to facilitate the implementation of the security assessment and authorization policy and associated security assessment and authorization controls; and CA-1b. Reviews and updates the current: CA-1b.1. Security assessment and authorization policy [Assignment: organization-defined frequency]; and CA-1b.2. Security assessment and authorization procedures [Assignment: organization-defined frequency].

Similar​

  • Internal
    • ID: dec-c-4d1ab582

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-1: Organizational cybersecurity policy is established and communicated
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed22

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags