did not identify, Personnel Risk The Responsible Entity assess, and Assessments did conduct Personnel correct the (PRAs) for Risk Assessments deficiencies. (3.2 individuals, (PRAs) for individuals, & 3.4) including including contractors contractors and OR and service vendors, service vendors, with authorized The Responsible with authorized electronic or authorized electronic or Entity did unescorted physical authorized conduct access but did not unescorted Personnel Risk evaluate criminal physical access but Assessments history records check (PRAs) for did not evaluate for access authorization criminal history individuals, for four or more records check for including individuals, and did not access contractors and identify, assess, and authorization for service vendors, correct the deficiencies. three individuals, with authorized (3.3 & 3.4) and did not electronic or identify, assess, authorized OR and correct the unescorted The Responsible Entity deficiencies. (3.3 physical access did not conduct but did not & 3.4) Personnel Risk evaluate criminal OR Assessments (PRAs) history records The Responsible for four or more check for access Entity did not individuals with authorization for conduct Personnel authorized electronic or one individual, Risk Assessments authorized unescorted and did not (PRAs) for three physical access within identify, assess, individuals with 7 calendar years of the and correct the authorized previous PRA deficiencies. (3.3 electronic or completion date and & 3.4) authorized has identified unescorted OR deficiencies, and did physical access not identify, assess, and The Responsible within 7 calendar correct the deficiencies. Entity did not years of the (3.5) conduct previous PRA Personnel Risk completion date,
did not identify, assess, and correct the deficiencies. (3.2 & 3.4) OR The Responsible Entity did conduct Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not evaluate criminal history records check for access authorization for one individual, and did not identify, assess, and correct the deficiencies. (3.3 & 3.4) OR The Responsible Entity did not conduct Personnel Risk Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not evaluate criminal history records check for access authorization for three individuals, and did not identify, assess, and correct the deficiencies. (3.3 & 3.4) OR The Responsible Entity did not conduct Personnel Risk Assessments (PRAs) for three individuals with authorized electronic or authorized unescorted physical access within 7 calendar years of the previous PRA completion date, The Responsible Entity did conduct Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not evaluate criminal history records check for access authorization for four or more individuals, and did not identify, assess, and correct the deficiencies. (3.3 & 3.4) OR The Responsible Entity did not conduct Personnel Risk Assessments (PRAs) for four or more individuals with authorized electronic or authorized unescorted physical access within 7 calendar years of the previous PRA completion date and has identified deficiencies, and did not identify, assess, and correct the deficiencies. (3.5)
VSL_Matrix_Complete_2016_01_01.docx