Assessment Objective
Determine if:
- PS-03a. individuals are screened prior to authorizing access to the system;
- PS-03b.
- PS-03b.[01] individuals are rescreened in accordance with [Assignment: conditions requiring rescreening];
- PS-03b.[02] where rescreening is so indicated, individuals are rescreened [Assignment: frequency].
Assessment Methods
Examine
- Personnel security policy
- procedures addressing personnel screening
- records of screened personnel
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with personnel security responsibilities
- organizational personnel with information security responsibilities
Test
- Organizational processes for personnel screening
Susietos užduotys
| Saito tipas | Užduotis |
|---|---|
| blocks | PS-03 [H] Personnel Screening |