CCI-003029

Use organization-defined automated mechanisms to notify organization-defined personnel or roles of individual termination actions; and/or disable access to system resources.

Implementation Guidance

The organization being inspected/assessed implements automated mechanisms to notify at a minimum, the ISSO and personnel responsible for revoking credentials upon termination of an individual. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials.

Validation Procedures

The organization conducting the inspection/assessment examines the configuration of the automated mechanism and any records of notification sent to ensure the organization being inspected/assessed implements automated mechanisms to notify at a minimum, the ISSO and personnel responsible for revoking credentials upon termination of an individual. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials.

Compelling Evidence

1.) Audit records of automated mechanisms for the notification of revoking credentials upon termination of an individual.

The controls below (if any) were marked by NIST as being related to CCI-003029.