CCI-003016

The organization, upon termination of individual employment, notifies organization-defined personnel or roles within an organization-defined time period.

Implementation Guidance

The organization being inspected/assessed notifies at a minimum, the ISSO and personnel responsible for revoking credentials immediately or within 24 hours upon termination of individual employment. The organization must maintain records of termination notification. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials. DoD has defined the time period as immediately or within 24 hours.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines records of termination notification to ensure the organization being inspected/assessed notifies at a minimum, the ISSO and personnel responsible for revoking credentials immediately or within 24 hours upon termination of individual employment. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials. DoD has defined the time period as immediately or within 24 hours.

Compelling Evidence

1.) Records/logs of termination notification that notify at minimum the ISSO and personnel responsible for revoking credentials immediately or within 24 hours upon termination of employment.

The controls below (if any) were marked by NIST as being related to CCI-003016.