Navigate

CCI-001522

CCI-001522 Definition

Upon termination of individual employment, disable system access within an organization-defined time period.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if upon termination of individual employment, system access is disabled within [PS-04_ODP[01]; a time period within which to disable system access is defined].

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing personnel termination; records of personnel termination actions; list of system accounts; records of terminated or revoked authenticators/credentials; records of exit interviews; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with account management responsibilities; system/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for personnel termination; mechanisms supporting and/or implementing personnel termination notifications; mechanisms for disabling system access/revoking authenticators].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001522.

Control	Description
PS-4	Upon termination of individual employment: a: Disable system access within [a time period within which to disable system access is defined;]; b: Terminate or revoke any authenticators and credentials associated with the individual; c: Conduct exit interviews that include a discussion of [information security topics to be discussed when conducting exit interviews are defined;]; d: Retrieve all security-related organizational system-related property; and e: Retain access to organizational information and systems formerly controlled by terminated individual.

Control

Description

PS-4

Upon termination of individual employment:

a: Disable system access within [a time period within which to disable system access is defined;];

b: Terminate or revoke any authenticators and credentials associated with the individual;

c: Conduct exit interviews that include a discussion of [information security topics to be discussed when conducting exit interviews are defined;];

d: Retrieve all security-related organizational system-related property; and

e: Retain access to organizational information and systems formerly controlled by terminated individual.