Navigate

CCI-001526

CCI-001526 Definition

Upon termination of individual employment, retain access to organizational systems formerly controlled by the terminated individual.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if upon termination of individual employment, access to Organizational information and systems formerly controlled by the terminated individual are retained.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing personnel termination; records of personnel termination actions; list of system accounts; records of terminated or revoked authenticators/credentials; records of exit interviews; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with account management responsibilities; system/network administrators; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for personnel termination; mechanisms supporting and/or implementing personnel termination notifications; mechanisms for disabling system access/revoking authenticators].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001526.

Control	Description
PS-4	Upon termination of individual employment: a: Disable system access within [a time period within which to disable system access is defined;]; b: Terminate or revoke any authenticators and credentials associated with the individual; c: Conduct exit interviews that include a discussion of [information security topics to be discussed when conducting exit interviews are defined;]; d: Retrieve all security-related organizational system-related property; and e: Retain access to organizational information and systems formerly controlled by terminated individual.

Control

Description

PS-4

Upon termination of individual employment:

a: Disable system access within [a time period within which to disable system access is defined;];

b: Terminate or revoke any authenticators and credentials associated with the individual;

c: Conduct exit interviews that include a discussion of [information security topics to be discussed when conducting exit interviews are defined;];

d: Retrieve all security-related organizational system-related property; and

e: Retain access to organizational information and systems formerly controlled by terminated individual.