PS-6 PS-6 (b) CCI-001533 High High The organization being Automatically Moderate Moderate inspected/assessed is compliant with this Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level level. DoD has defined the frequency as annually. PS-6 PS-6 (c ) (1) CCI-001531 High High The organization Moderate Moderate conducting the Low Low inspection/assessment obtains a list of organizational individuals with active accounts and validates the existence of signed DD Form 2875 (paper or electronic) associated with a sampling of individuals selected from the list. PS-6 PS-6 (c ) (2) CCI-003036 High High The organization Moderate Moderate conducting the Low Low inspection/assessment obtains and examines a sampling of re-signed access agreements to ensure the organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access. PS-6 PS-6 (c ) (2) CCI-003037 High High The organization being Automatically Moderate Moderate inspected/assessed is compliant with this Low Low automatically compliant CCI because they are with this CCI because they covered at the DoD are covered at the DoD level level. DoD has defined the frequency as when there is a change to the user's level of access.
PS-6 PS-6 (b) CCI-001533 High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as annually. Automatically compliant with this CCI because they are covered at the DoD level PS-6 PS-6 (c ) (1) CCI-001531 High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains a list of organizational individuals with active accounts and validates the existence of signed DD Form 2875 (paper or electronic) associated with a sampling of individuals selected from the list. PS-6 PS-6 (c ) (2) CCI-003036 High Moderate Low High Moderate Low The organization conducting the inspection/assessment obtains and examines a sampling of re-signed access agreements to ensure the organization being inspected/assessed requires that individuals re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or when there is a change to the user's level of access. DoD has defined the frequency as when there is a change to the user's level of access. PS-6 PS-6 (c ) (2) CCI-003037 High Moderate Low High Moderate Low The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined the frequency as when there is a change to the user's level of access. Automatically compliant with this CCI because they are covered at the DoD level
RMF_Personnel-Security-Plan.docx