PS-4 PS-4 (c ) CCI-003024 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines the documented information security topics to ensure the organization being inspected/assessed defines information security topics to be discussed while conducting exit interviews. DoD has determined the information security topics are not appropriate to define at the Enterprise level. PS-4 PS-4 (c ) CCI-001523 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines documentation of departed personnel and the audit trail of conducted exit interviews to ensure all departed personnel had exit interviews conducted that include a discussion of information security topics defined in PS-4, CCI 3024. PS-4 PS-4 (d) CCI-001524 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment obtains and examines appropriate organization security-related organizational information systems-related property documentation/logs and compares to audit trail of all retrieved organizational information property (AU-2) to ensure all property has been retrieved. PS-4 PS-4 (e ) CCI-001525 High High High The organization Moderate Moderate Moderate conducting the Low Low Low inspection/assessment interviews appropriate IT and security personnel to validate the organization has procedures in place which, upon termination of individual's employment, will ensure it retains access to organizational information formerly controlled by the terminated individual.
PS-4 PS-4 (c ) CCI-003024 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines the documented information security topics to ensure the organization being inspected/assessed defines information security topics to be discussed while conducting exit interviews. DoD has determined the information security topics are not appropriate to define at the Enterprise level. PS-4 PS-4 (c ) CCI-001523 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines documentation of departed personnel and the audit trail of conducted exit interviews to ensure all departed personnel had exit interviews conducted that include a discussion of information security topics defined in PS-4, CCI 3024. PS-4 PS-4 (d) CCI-001524 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines appropriate organization security-related organizational information systems-related property documentation/logs and compares to audit trail of all retrieved organizational information property (AU-2) to ensure all property has been retrieved. PS-4 PS-4 (e ) CCI-001525 High Moderate Low High Moderate Low High Moderate Low The organization conducting the inspection/assessment interviews appropriate IT and security personnel to validate the organization has procedures in place which, upon termination of individual's employment, will ensure it retains access to organizational information formerly controlled by the terminated individual.
RMF_Personnel-Security-Plan.docx