+PS-03(03) Information Requiring Special Protective Measures
|
PS-03(03) Information Requiring Special Protective Measures
Control
Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection:- Have valid access authorizations that are demonstrated by assigned official government duties; and
- Satisfy [Assignement: additional personnel screening criteria].
Discussion
Organizational information that requires special protection includes controlled unclassified information. Personnel security criteria include position sensitivity background screening requirements.
Assessment Objective
- individuals accessing a system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties;
- individuals accessing a system processing, storing, or transmitting information requiring special protection satisfy [Assignement: additional personnel screening criteria].
Assessment Method
Examine
Personnel security policy
access control policy, procedures addressing personnel screening
records of screened personnel
screening criteria
records of access authorizations
system security plan
other relevant documents or records
Interview
Organizational personnel with personnel security responsibilities
organizational personnel with information security responsibilities
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|