CCI-003039

Require individuals to sign an acknowledgement of legally binding post-employment requirements for protection of organizational information, if applicable, as part of granting initial access to covered information.

Implementation Guidance

Determine if individuals are required to sign an acknowledgement of applicable, legally binding post-employment requirements as part of being granted initial access to covered information.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; procedures addressing access agreements for organizational information and systems; signed post-employment acknowledgement forms; access agreements; list of applicable, legally binding post-employment requirements; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel who have signed access agreements that include post-employment requirements; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for post-employment requirements; mechanisms supporting notifications and individual acknowledgements of post-employment requirements].

The controls below (if any) were marked by NIST as being related to CCI-003039.