CCI-003019

Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to ensure that individuals accessing an information system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process and a sampling of access authorizations to ensure individuals accessing an information system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties.

Compelling Evidence

1.) Appointment letters for individuals accessing information systems processing, storing, or transmitting information requiring special protection that have valid access and include assigned official government duties.

The controls below (if any) were marked by NIST as being related to CCI-003019.