CCI-001537

Verify that access to classified information requiring special protection is granted only to individuals who satisfy associated personnel security criteria.

Implementation Guidance

The organization being inspected/assessed ensures all authorized access to classified information requiring special protection is granted only to those individuals who have satisfied the associated personnel security criteria. DD Form 2875 is the accepted DoD methodology of requesting and granting of access to information and information systems.

Validation Procedures

The organization conducting the inspection/assessment reviews access agreements; access authorizations; personnel security criteria; along with other relevant documents or records to ensure the organization has granted authorized access to classified information requiring special protection only to those individuals who have satisfied the associated personnel security criteria.

Compelling Evidence

1.) User Agreements. 2.) Access authorizations.

The controls below (if any) were marked by NIST as being related to CCI-001537.