defined time period; and disabling the user identifier after the organization-defined time period of inactivity. Failure to meet the personnel security policy and procedures requirements listed below could result in the incomplete and ineffective personnel security policy and procedures leaving the personnel/employee [Test: PS-1.1 - with a different interpretation [Test: PS-1.1 - Personnel Security of the policy, which could lead Personnel Security Policy and to the abuse of information Policy and Procedures] system resources and possibly Personnel Security Procedures] to the compromise of the Policy and Not Entered [E-# OR system or data: Procedures [NIST Not Entered High W-#] 800-53 w/ DHS [Test: PS-1.2 - (i) the organization defines the 4300A PS-1] [Test: PS-1.2 - Personnel Security frequency of personnel security Personnel Security Policy and policy reviews/updates; Policy and Procedures] (ii) the organization Procedures] reviews/updates personnel Not Entered security policy in accordance Not Entered with organization-defined frequency; and (iii) the organization defines the frequency of personnel security procedure reviews/updates;
time period; and disabling the user identifier after the organization-defined time period of inactivity. [E-# OR W-#] Personnel Security Policy and Procedures [NIST 800-53 w/ DHS 4300A PS-1] [Test: PS-1.1 - Personnel Security Policy and Procedures] Not Entered [Test: PS-1.2 - Personnel Security Policy and Procedures] Not Entered Failure to meet the personnel security policy and procedures requirements listed below could result in the incomplete and ineffective personnel security policy and procedures leaving the personnel/employee with a different interpretation of the policy, which could lead to the abuse of information system resources and possibly to the compromise of the system or data: (i) the organization defines the frequency of personnel security policy reviews/updates; (ii) the organization reviews/updates personnel security policy in accordance with organization-defined frequency; and (iii) the organization defines the frequency of personnel security procedure reviews/updates; High [Test: PS-1.1 - Personnel Security Policy and Procedures] Not Entered [Test: PS-1.2 - Personnel Security Policy and Procedures] Not Entered defined
Security%20Assessment%20Report%20Extensible.docx