An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., security controls inherited by information systems).
Source(s):
CNSSI 4009-2015
NIST SP 800-137
under Common Control Provider
NIST SP 800-30 Rev. 1
under Common Control Provider
from
CNSSI 4009
NIST SP 800-39
under Common Control Provider
NISTIR 8170
under Common Control Provider
An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., controls inheritable by organizational systems).
Source(s):
NIST SP 800-37 Rev. 2
An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., security or privacy controls inheritable by systems).
Source(s):
NIST SP 800-53 Rev. 5
from
NIST SP 800-37 Rev. 2
NIST SP 800-53A Rev. 5
from
NIST SP 800-37 Rev. 2
NIST SP 800-53B
from
NIST SP 800-37 Rev. 2