CCI-003020

Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection satisfy organization-defined additional personnel screening criteria.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to ensure that individuals accessing an information system processing, storing, or transmitting information requiring special protection satisfy additional personnel screening criteria defined in PS-3 (3), CCI 3021.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed implements a process to ensure that individuals accessing an information system processing, storing, or transmitting information requiring special protection satisfy additional personnel screening criteria defined in PS-3 (3), CCI 3021.

Compelling Evidence

1.) SOP/TTP process implementation documentation for individuals accessing an information system processing, storing, or transmitting information requiring special protection satisfies additional personnel screening criteria defined in PS-3 (3), CCI 3021.

The controls below (if any) were marked by NIST as being related to CCI-003020.