Navigate

CCI-004510

CCI-004510 Definition

Defines the information types that meet the organization-defined citizenship requirement.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if individuals accessing a system processing, storing, or transmitting [PS-03(04)_ODP[01]; information types that are processed, stored, or transmitted by a system that require individuals accessing the system to meet PS-03(04)_ODP[02] citizenship requirements are defined] meet [PS-03(04)_ODP[02]; citizenship requirements to be met by individuals to access a system processing, storing, or transmitting information are defined].

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; access control policy, procedures addressing personnel screening; records of screened personnel; screening criteria; records of access authorizations; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Organizational processes for ensuring valid access authorizations for information requiring citizenship; organizational process for additional personnel screening for information requiring citizenship].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-004510.

Control	Description
PS-3(4)	Verify that individuals accessing a system processing, storing, or transmitting [information types that are processed, stored, or transmitted by a system that require individuals accessing the system to meet {{ insert: param, ps-03.04_odp.02 }} are defined;] meet [citizenship requirements to be met by individuals to access a system processing, storing, or transmitting information are defined;].