A statement that should be true for a well-implemented ISCM program. This statement is the evaluation criteria part of an assessment element.
Source(s):
NIST SP 800-137A