Assessment Objective
Determine if:
- PS-03(04) individuals accessing a system processing, storing, or transmitting [Assignment: information types] meet [Assignment: citizenship requirements].
Assessment Methods
Examine
- Personnel security policy
- access control policy, procedures addressing personnel screening
- records of screened personnel
- screening criteria
- records of access authorizations
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with personnel security responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for ensuring valid access authorizations for information requiring citizenship
- organizational process for additional personnel screening for information requiring citizenship
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | PS-03(04) Citizenship Requirements |