CCI-001519

The organization defines the frequency for rescreening individuals with authorized access to the information system when organization-defined conditions requiring rescreening are met.

Implementation Guidance

The information system owner will define and document the required frequency of rescreening for access to the information system. DoD has determined the frequency is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documentation defining the required frequency for rescreening individuals for access to the system. DoD has determined the frequency is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) SOP/TTP documentation of required frequency for rescreening individuals for access the system.

The controls below (if any) were marked by NIST as being related to CCI-001519.