CCI-001521

Verify that individuals accessing a system processing, storing, or transmitting types of classified information which require formal indoctrination, are formally indoctrinated for all of the relevant types of information to which they have access on the system.

Implementation Guidance

Determine if individuals accessing a system processing, storing, or transmitting types of classified information that require formal indoctrination are formally indoctrinated for all of the relevant types of information to which they have access on the system.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing personnel screening; indoctrination documents; records of screened personnel; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for formal indoctrination for all relevant types of information to which personnel have access].

The controls below (if any) were marked by NIST as being related to CCI-001521.