CCI-001538

Verify that access to classified information requiring special protection is granted only to individuals who have read, understood, and signed a nondisclosure agreement.

Implementation Guidance

Determine if access to classified information requiring special protection is granted only to individuals who have read, understood, and signed a non-disclosure agreement.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing access agreements for organizational information and systems; access agreements; access authorizations; personnel security criteria; signed non-disclosure agreements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel who have signed non-disclosure agreements; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for access to classified information requiring special protection].

The controls below (if any) were marked by NIST as being related to CCI-001538.