SI-1—Policy and Procedures
>Control Description
Develop, document, and disseminate to all organizational personnel with system and information integrity responsibilities and information system owners: (a) Addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and (b) Is consistent with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines; and
Agency-level system and information integrity policy that:
Procedures to facilitate the implementation of the system and information integrity policy and the associated system and information integrity controls;
Designate organizational personnel with system and information integrity responsibilities to manage the development, documentation, and dissemination of the system and information integrity policy and procedures; and
Review and update the current system and information integrity:
Policy annually and following any security incidents involving unauthorized access to CJI or systems used to process, store, or transmit CJI; and
Procedures annually and following any security incidents involving unauthorized access to CJI or systems used to process, store, or transmit CJI.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.