CCI-001536

The organization ensures that access to classified information requiring special protection is granted only to individuals who have a valid access authorization that is demonstrated by assigned official government duties.

Implementation Guidance

The organization being inspected/assessed will grant access to classified information requiring special protection only to individuals who have a valid access authorization that is demonstrated by assigned official government duties. DD Form 2875 is the accepted DoD methodology of requesting and granting of access to information and information systems.

Validation Procedures

The organization conducting the inspection/assessment obtains a list of organizational individuals with active accounts and validates the existence of signed DD Form 2875 (paper or electronic) associated with individuals requiring access to classified information with special protection.

Compelling Evidence

1.) List of organizational individuals with active accounts and validate the existence of signed DD Form 2875 (paper or electronic) associated with individuals requiring access to classified information with special protection.

The controls below (if any) were marked by NIST as being related to CCI-001536.