Navigate

PS-3 (3)

PS-3 (3): Information With Special Protection Measures

The organization ensures that individuals accessing an information system processing, storing, or transmitting information requiring special protection:

PS-3 (3)(a): Have valid access authorizations that are demonstrated by assigned official government duties; and

PS-3 (3)(b): Satisfy [Assignment: organization-defined additional personnel screening criteria].

Supplemental

Organizational information requiring special protection includes, for example, Controlled Unclassified Information (CUI) and Sources and Methods Information (SAMI). Personnel security criteria include, for example, position sensitivity background screening requirements.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Privacy (High), Privacy (Low), Privacy (Mod), Privacy (PHI)

Related Controls

The controls below (if any) were marked by NIST as being related to PS-3 (3).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of PS-3 (3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to PS-3 (3).

CCI	Definition
CCI-003019	The organization ensures that individuals accessing an information system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties.
CCI-003020	The organization ensures that individuals accessing an information system processing, storing, or transmitting information requiring special protection satisfy organization-defined additional personnel screening criteria.
CCI-003021	The organization defines additional personnel screening criteria that individuals accessing an information system processing, storing, or transmitting information requiring protection must satisfy.