Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , PS-2 What is the solution and how is it implemented? Part a Part b Part c PS-3 Personnel Screening (L) (M) (H) The organization: Screens individuals prior to authorizing access to the information system; and Rescreens individuals according to [FedRAMP Assignment: For national security clearances; a reinvestigation is required during the fifth (5th) year for top secret security clearance, the tenth (10th) year for secret security clearance, and fifteenth (15th) year for confidential security clearance. For moderate risk law enforcement and high impact public trust level, a reinvestigation is required during the fifth (5th) year. There is no reinvestigation for other moderate risk positions or any low risk positions]. PS-3 Control Summary Information Responsible Role: Parameter PS-3(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for ,
Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , PS-2 What is the solution and how is it implemented? Part a Part b Part c PS-3 Personnel Screening (L) (M) (H) The organization: Screens individuals prior to authorizing access to the information system; and Rescreens individuals according to [FedRAMP Assignment: For national security clearances; a reinvestigation is required during the fifth (5th) year for top secret security clearance, the tenth (10th) year for secret security clearance, and fifteenth (15th) year for confidential security clearance. For moderate risk law enforcement and high impact public trust level, a reinvestigation is required during the fifth (5th) year. There is no reinvestigation for other moderate risk positions or any low risk positions]. PS-3 Control Summary Information Responsible Role: Parameter PS-3(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for ,
FedRAMP-SSP-Low-Baseline-Template.docx