CCI-001524

The organization, upon termination of individual employment, retrieves all security-related organizational information system-related property.

Implementation Guidance

The organization being inspected/assessed upon termination of individual employment retrieves all security-related organizational information systems-related property IAW organization security policy and procedures. The organization must retain an audit trail of all retrieved security-related organizational information systems-related property (AU-2).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines appropriate organization security-related organizational information systems-related property documentation/logs and compares to audit trail of all retrieved security-related organizational information systems-related property (AU-2) to ensure all property has been retrieved.

Compelling Evidence

1.) Property logs of all security related organizational information systems match audit logs following termination of individual employment that all property has been retrieved.

The controls below (if any) were marked by NIST as being related to CCI-001524.