assessment shall be conducted personnel were pursuant to that program prior to granted such OR such personnel being granted access except in such access except in specified specified The Responsible Entity circumstances such as an circumstances did not conduct the emergency. such as an personnel risk emergency. assessment pursuant to The personnel risk assessment that program for program shall at a minimum personnel granted such include: access except in specified circumstances such as an emergency. The Responsible Entity shall R3.1. N/A N/A The Responsible The Responsible Entity ensure that each assessment Entity did not did not ensure that each conducted include, at least, ensure that an assessment conducted identity verification (e.g., Social assessment include, at least, Security Number verification in conducted identity verification the U.S.) and seven year criminal included an (e.g., Social Security check. The Responsible Entity identity Number verification in may conduct more detailed verification (e.g., the U.S.) and reviews, as permitted by law and Social Security criminal check. subject to existing collective Number bargaining unit agreements, verification in the depending upon the criticality of U.S.) or a the position. criminal check. The Responsible Entity shall R3.2. N/A The Responsible Entity did not The Responsible The Responsible Entity update each personnel risk update each personnel risk Entity did not did not update each assessment at least every seven assessment at least every seven years update each personnel risk years after the initial personnel after the initial personnel risk personnel risk assessment at least risk assessment or for cause. assessment but did update it for cause assessment for every seven years after when applicable. cause (when the initial personnel applicable) but did risk assessment nor at least updated it was it updated for every seven years cause when applicable. after the initial
assessment shall be conducted pursuant to that program prior to such personnel being granted such access except in specified circumstances such as an emergency. The personnel risk assessment program shall at a minimum include: personnel were granted such access except in specified circumstances such as an emergency. OR The Responsible Entity did not conduct the personnel risk assessment pursuant to that program for personnel granted such access except in specified circumstances such as an emergency. R3.1. The Responsible Entity shall ensure that each assessment conducted include, at least, identity verification (e.g., Social Security Number verification in the U.S.) and seven year criminal check. The Responsible Entity may conduct more detailed reviews, as permitted by law and subject to existing collective bargaining unit agreements, depending upon the criticality of the position. N/A N/A The Responsible Entity did not ensure that an assessment conducted included an identity verification (e.g., Social Security Number verification in the U.S.) or a criminal check. The Responsible Entity did not ensure that each assessment conducted include, at least, identity verification (e.g., Social Security Number verification in the U.S.) and criminal check. R3.2. The Responsible Entity shall update each personnel risk assessment at least every seven years after the initial personnel risk assessment or for cause. N/A The Responsible Entity did not update each personnel risk assessment at least every seven years after the initial personnel risk assessment but did update it for cause when applicable. The Responsible Entity did not update each personnel risk assessment for cause (when applicable) but did at least updated it every seven years after the initial The Responsible Entity did not update each personnel risk assessment at least every seven years after the initial personnel risk assessment nor was it updated for cause when applicable.
VSL_Matrix_Complete_2016_01_01.docx