CCI-004524

Implementation Guidance

Determine if: - security roles and responsibilities are incorporated into Organizational position descriptions. - privacy roles and responsibilities are incorporated into Organizational position descriptions.

Validation Procedures

Examine: [SELECT FROM: Personnel security policy; personnel security procedures; procedures addressing position descriptions; security and privacy position descriptions; system security plan; privacy plan; privacy program plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with information security and privacy responsibilities; organizational personnel with human capital management responsibilities]. Test: [SELECT FROM: Organizational processes for managing position descriptions].