CCI-000284 The organization schedules announced or unannounced assessments (in-depth monitoring, malicious user testing, penetration testing, red team…
DISA Control Correlation Identifiers (CCI) 2026-07-14
All changes in this version
All changes in this version
Title
The organization schedules announced or unannounced assessments (in-depth monitoring, malicious user testing, penetration testing, red team…
Control
The organization schedules announced or unannounced assessments (in-depth monitoring, malicious user testing, penetration testing, red team exercises, or other organization-defined forms of security assessment), on an organization-defined frequency, to ensure compliance with all vulnerability mitigation procedures.