PS-7 PS-7 (d) CCI-003041 High High The organization Moderate Moderate conducting the Low Low inspection/assessment obtains and examines the documented process to ensure the organization inspected/assessed requires third-party providers to notify at a minimum, the ISSO and personnel responsible for transferring credentials of any personnel transfers or terminations of third-party personnel who possess organizational credentials and/or badges, or who have information system privileges immediately. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials. DoD has defined the time period as immediately. PS-7 (d) CCI-003042 High High The organization being Automatically PS-7 Moderate Moderate inspected/assessed is compliant with this Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level level. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials. PS-7 PS-7 (d) CCI-003043 High High The organization being Automatically Moderate Moderate inspected/assessed is compliant with this Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level. DoD has defined the time period as immediately. PS-7 PS-7 (e ) CCI-001541 High High The organization Moderate Moderate conducting the Low Low inspection/assessment obtains and examines the audit trail of monitoring activity to ensure the organization being inspected/assessed monitors third-party provider compliance with personnel security requirements.
PS-7 PS-7 (d) CCI-003041 High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization inspected/assessed requires third-party providers to notify at a minimum, the ISSO and personnel responsible for transferring credentials of any personnel transfers or terminations of third-party personnel who possess organizational credentials and/or badges, or who have information system privileges immediately. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials. DoD has defined the time period as immediately. PS-7 PS-7 (d) CCI-003042 High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the personnel or roles as at a minimum, the ISSO and personnel responsible for transferring credentials. Automatically compliant with this CCI because they are covered at the DoD level PS-7 PS-7 (d) CCI-003043 High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the time period as immediately. Automatically compliant with this CCI because they are covered at the DoD PS-7 PS-7 (e ) CCI-001541 High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the audit trail of monitoring activity to ensure the organization being inspected/assessed monitors third-party provider compliance with personnel security requirements.
RMF_Personnel-Security-Plan.docx