Assessment Objective
Determine if:
- PS-02a. a risk designation is assigned to all organizational positions;
- PS-02b. screening criteria are established for individuals filling organizational positions;
- PS-02c. position risk designations are reviewed and updated [Assignment: frequency].
Assessment Methods
Examine
- Personnel security policy
- procedures addressing position categorization
- appropriate codes of federal regulations
- list of risk designations for organizational positions
- records of position risk designation reviews and updates
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with personnel security responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for assigning, reviewing, and updating position risk designations
- organizational processes for establishing screening criteria
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | PS-02 [H] Position Risk Designation |