CCI-001541

Implementation Guidance

The organization being inspected/assessed monitors third-party provider compliance with personnel security requirements. The organization must maintain an audit trail of monitoring activity.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of monitoring activity to ensure the organization being inspected/assessed monitors third-party provider compliance with personnel security requirements.

Compelling Evidence

1.) Organizational audit logs of third party providers that verify compliance with personnel security requirements in the Service Level Agreements.