Assessment Objective
Determine if:
- individuals accessing a system processing, storing, or transmitting CUI meet [Assignment: organization-defined citizenship requirements].
Assessment Methods
Examine
- Personnel security policy
- access control policy, procedures addressing personnel screening
- records of screened personnel
- screening criteria
- records of access authorizations
- system security plan
- other relevant documents or records
Interview
- Personnel with personnel security responsibilities
- personnel with information security responsibilities
Test
- Processes for ensuring valid access authorizations for accessing CUI and systems requiring citizenship
- processes for additional personnel screening
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | 03.09.04E Citizenship Requirements |