Assessment Objective
Determine if:
- PS-06(03)(a) individuals are notified of applicable, legally binding post-employment requirements for the protection of organizational information;
- PS-06(03)(b) individuals are required to sign an acknowledgement of applicable, legally binding post-employment requirements as part of being granted initial access to covered information.
Assessment Methods
Examine
- Personnel security policy
- procedures addressing access agreements for organizational information and systems
- signed post-employment acknowledgement forms
- access agreements
- list of applicable, legally binding post-employment requirements
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with personnel security responsibilities
- organizational personnel who have signed access agreements that include post-employment requirements
- organizational personnel with information security responsibilities
Test
- Organizational processes for post-employment requirements
- mechanisms supporting notifications and individual acknowledgements of post-employment requirements
Propojené úkoly
| Typ vazby | Úkol |
|---|---|
| blocks | PS-06(03) Post-employment Requirements |