CCI-003023

Upon termination of individual employment, terminate or revoke any authenticators and credentials associated with the individual.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to terminate/revoke any authenticators/credentials associated with the individual upon termination of individual employment. The organization must maintain records of termination/revocation of any authenticators/credentials.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as a sampling of records of termination/revocation of any authenticators/credentials to ensure the organization being inspected/assessed terminates/revokes any authenticators/credentials associated with the individual upon termination of individual employment.

Compelling Evidence

1.) SOP/TTP documentation on procedure for revocation of any authenticators/credentials associated with terminated individuals. 2.) Records of actual termination/revocation of any authenticators/credentials upon termination of individuals.

The controls below (if any) were marked by NIST as being related to CCI-003023.