CCI-001522

Upon termination of individual employment, disable system access within an organization-defined time period.

Implementation Guidance

The organization being inspected/assessed upon termination of individual employment, terminates information system access immediately and IAW organization security policy and procedures. The organization must retain an audit trail of account termination actions (AU-2). DoD has defined the time period as immediately.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines organizational security policy and procedures documentation and audit records of account termination actions to ensure account termination actions are conducted immediately and IAW organizational security policy and procedures. DoD has defined the time period as immediately.

Compelling Evidence

1.) Security policy documentation on procedures for account termination actions and auditing of actions. 2.) Audit records pertaining to account termination actions.

The controls below (if any) were marked by NIST as being related to CCI-001522.