CCI-003038

Notify individuals of applicable, legally binding post-employment requirements for protection of organizational information.

Implementation Guidance

Determine if individuals are notified of applicable, legally binding post-employment requirements for the protection of Organizational information.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing access agreements for organizational information and systems; signed post-employment acknowledgement forms; access agreements; list of applicable, legally binding post-employment requirements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel who have signed access agreements that include post-employment requirements; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for post-employment requirements; mechanisms supporting notifications and individual acknowledgements of post-employment requirements].

The controls below (if any) were marked by NIST as being related to CCI-003038.