Skip to main content

πŸ’Ό SC-1 SYSTEM AND COMMUNICATIONS PROTECTION POLICY AND PROCEDURES

Description​

The organization: SC-1a. Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: SC-1a.1. A system and communications protection policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and SC-1a.2. Procedures to facilitate the implementation of the system and communications protection policy and associated system and communications protection controls; and SC-1b. Reviews and updates the current: SC-1b.1. System and communications protection policy [Assignment: organization-defined frequency]; and SC-1b.2. System and communications protection procedures [Assignment: organization-defined frequency].

Similar​

  • Internal
    • ID: dec-c-37b12699

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-1: Organizational cybersecurity policy is established and communicated
πŸ’Ό NIST CSF v1.1 β†’ πŸ’Ό ID.GV-3: Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed22

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags