Navigate

CCI-003017

CCI-003017 Definition

The organization defines the personnel or roles to whom a personnel security policy is disseminated.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the roles as organizational personnel with access control responsibilities.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the roles as organizational personnel with access control responsibilities.

Compelling Evidence

Automatically compliant per DoD 5200.2-R.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003017.

Control	Description
PS-1	The organization: PS-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: PS-1a.1.: A personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and PS-1a.2.: Procedures to facilitate the implementation of the personnel security policy and associated personnel security controls; and PS-1b.: Reviews and updates the current: PS-1b.1.: Personnel security policy [Assignment: organization-defined frequency]; and PS-1b.2.: Personnel security procedures [Assignment: organization-defined frequency].

Control

Description

PS-1

The organization:

PS-1a.: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:
- PS-1a.1.: A personnel security policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- PS-1a.2.: Procedures to facilitate the implementation of the personnel security policy and associated personnel security controls; and

PS-1b.: Reviews and updates the current:
- PS-1b.1.: Personnel security policy [Assignment: organization-defined frequency]; and
- PS-1b.2.: Personnel security procedures [Assignment: organization-defined frequency].