CCI-001523

The organization, upon termination of individual employment, conducts exit interviews that include a discussion of organization-defined information security topics.

Implementation Guidance

The organization being inspected/assessed, conducts exit interviews that include a discussion of information security topics defined in PS-4, CCI 3024 upon termination of individual employment IAW organization security policy and procedures. The organization must retain an audit trail of conducted exit interviews (AU-2)

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of departed personnel and the audit trail of conducted exit interviews to ensure all departed personnel had exit interviews conducted that include a discussion of information security topics defined in PS-4, CCI 3024.

Compelling Evidence

1.) Audit trails of exit interviews for departed personnel that includes a discussion of information security topics defined in PS-4, CCI 3024.

The controls below (if any) were marked by NIST as being related to CCI-001523.