CCI-003029

The organization employs automated mechanisms to notify organization-defined personnel or roles upon termination of an individual.

Implementation Guidance

The organization being inspected/assessed implements automated mechanisms to notify at a minimum, the ISSO and personnel responsible for revoking credentials upon termination of an individual. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials.

Validation Procedures

The organization conducting the inspection/assessment examines the configuration of the automated mechanism and any records of notification sent to ensure the organization being inspected/assessed implements automated mechanisms to notify at a minimum, the ISSO and personnel responsible for revoking credentials upon termination of an individual. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for revoking credentials.

Compelling Evidence

1.) Audit records of automated mechanisms for the notification of revoking credentials upon termination of an individual.

The controls below (if any) were marked by NIST as being related to CCI-003029.