CCI-001527

Review and confirm the ongoing operational need for current logical and physical access authorizations to systems and facilities when individuals are reassigned or transferred to other positions within the organization.

Implementation Guidance

The organization being inspected/assessed reviews and confirms ongoing operational need for logical and physical access authorizations to information systems/facilities when individuals are reassigned or transferred to other positions within the organization. The organization must maintain an audit trail of reviews.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of reviews to ensure that the organization has confirmed the ongoing operational need for logical and physical access authorizations to information systems/facilities when individuals are reassigned or transferred to other positions within the organization.

Compelling Evidence

1.) Audit logs that pertain to the organization confirming the ongoing operational need for logical and physical access.

The controls below (if any) were marked by NIST as being related to CCI-001527.