Navigate

CCI-001530

CCI-001530 Definition

The organization defines the time period within which the organization initiates organization-defined transfer or reassignment actions following the formal personnel transfer action.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD defines the time period as immediately.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD defines the time period as immediately.

Compelling Evidence

Automatically compliant.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001530.

Control	Description
PS-5	The organization: PS-5a.: Reviews and confirms ongoing operational need for current logical and physical access authorizations to information systems/facilities when individuals are reassigned or transferred to other positions within the organization; PS-5b.: Initiates [Assignment: organization-defined transfer or reassignment actions] within [Assignment: organization-defined time period following the formal transfer action]; PS-5c.: Modifies access authorization as needed to correspond with any changes in operational need due to reassignment or transfer; and PS-5d.: Notifies [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period].

Control

Description

PS-5

The organization:

PS-5a.: Reviews and confirms ongoing operational need for current logical and physical access authorizations to information systems/facilities when individuals are reassigned or transferred to other positions within the organization;

PS-5b.: Initiates [Assignment: organization-defined transfer or reassignment actions] within [Assignment: organization-defined time period following the formal transfer action];

PS-5c.: Modifies access authorization as needed to correspond with any changes in operational need due to reassignment or transfer; and

PS-5d.: Notifies [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period].