CCI-003031

The organization modifies access authorization as needed to correspond with any changes in operational need due to reassignment or transfer.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to modify access authorization as needed to correspond with any changes in operational need due to reassignment or transfer.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process and a sampling of accounts of users recently transferred or reassigned to ensure the organization being inspected/assessed modifies access authorization as needed to correspond with any changes in operational need due to reassignment or transfer.

Compelling Evidence

1.) SOP/TTP process documentation to modify access authorization corresponding with any changes in operational need due to reassignment or transfer.

The controls below (if any) were marked by NIST as being related to CCI-003031.