Navigate

CCI-001504

CCI-001504 Definition

The organization develops and documents a personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD 5200.2-R meets the DoD requirements for personnel security policy and procedures. DoD Components are automatically compliant with this CCI because they are covered by the DoD level policy, DoD 5200.2-R.

Validation Procedures

Compelling Evidence

Automatically compliant per DoD 5200.2-R.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001504.

Control	Description
PS-1	The organization: PS-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: PS-1a.1.: A personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and PS-1a.2.: Procedures to facilitate the implementation of the personnel security policy and associated personnel security controls; and PS-1b.: Reviews and updates the current: PS-1b.1.: Personnel security policy [Assignment: organization-defined frequency]; and PS-1b.2.: Personnel security procedures [Assignment: organization-defined frequency].

Control

Description

PS-1

The organization:

PS-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- PS-1a.1.: A personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- PS-1a.2.: Procedures to facilitate the implementation of the personnel security policy and associated personnel security controls; and

PS-1b.: Reviews and updates the current:
- PS-1b.1.: Personnel security policy [Assignment: organization-defined frequency]; and
- PS-1b.2.: Personnel security procedures [Assignment: organization-defined frequency].