with authorized unescorted The Responsible Entity did conduct The Responsible Entity electronic or physical access but Personnel Risk Assessments (PRAs) did conduct Personnel authorized did not confirm for individuals, including contractors Risk Assessments unescorted identity for three and service vendors, with authorized (PRAs) for individuals, physical access individuals, and electronic or authorized unescorted including contractors but did not did not identify, physical access but did not evaluate and service vendors, confirm identity assess, and correct criminal history records check for with authorized for one the deficiencies. access authorization for two electronic or authorized individual, and (3.1 & 3.4) individuals, and did not identify, unescorted physical did not identify, assess, and correct the deficiencies. OR access but did not assess, and (3.3 & 3.4) confirm identity for correct the The Responsible four or more deficiencies. (3.1 OR Entity has a individuals, and did not & 3.4) process to perform identify, assess, and The Responsible Entity did not seven-year OR correct the deficiencies. conduct Personnel Risk Assessments criminal history (3.1 & 3.4) (PRAs) for two individuals with The Responsible record checks for authorized electronic or authorized Entity has a individuals, OR unescorted physical access within 7 process to including calendar years of the previous PRA The Responsible Entity perform contractors and completion date, and did not identify, has a process to criminal service vendors, assess, and correct the deficiencies. perform seven-year history record with authorized (3.5) criminal history record checks for electronic or checks for individuals, individuals, authorized including contractors including unescorted and service vendors, contractors and physical access but with authorized service vendors, did not include the electronic or authorized with authorized required checks unescorted physical electronic or described in 3.2.1 access but did not authorized and 3.2.2 for three include the required unescorted individuals, and checks described in physical access did not identify, 3.2.1 and 3.2.2 for four but did not assess, and correct or more individuals, include the the deficiencies. and did not identify, required checks (3.2 & 3.4) assess, and correct the described in OR deficiencies. (3.2 & 3.2.1 and 3.2.2 3.4) for one The Responsible individual, and Entity did conduct OR
with authorized electronic or authorized unescorted physical access but did not confirm identity for one individual, and did not identify, assess, and correct the deficiencies. (3.1 & 3.4) OR The Responsible Entity has a process to perform criminal history record checks for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not include the required checks described in 3.2.1 and 3.2.2 for one individual, and The Responsible Entity did conduct Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not evaluate criminal history records check for access authorization for two individuals, and did not identify, assess, and correct the deficiencies. (3.3 & 3.4) OR The Responsible Entity did not conduct Personnel Risk Assessments (PRAs) for two individuals with authorized electronic or authorized unescorted physical access within 7 calendar years of the previous PRA completion date, and did not identify, assess, and correct the deficiencies. (3.5) unescorted physical access but did not confirm identity for three individuals, and did not identify, assess, and correct the deficiencies. (3.1 & 3.4) OR The Responsible Entity has a process to perform seven-year criminal history record checks for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not include the required checks described in 3.2.1 and 3.2.2 for three individuals, and did not identify, assess, and correct the deficiencies. (3.2 & 3.4) OR The Responsible Entity did conduct The Responsible Entity did conduct Personnel Risk Assessments (PRAs) for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not confirm identity for four or more individuals, and did not identify, assess, and correct the deficiencies. (3.1 & 3.4) OR The Responsible Entity has a process to perform seven-year criminal history record checks for individuals, including contractors and service vendors, with authorized electronic or authorized unescorted physical access but did not include the required checks described in 3.2.1 and 3.2.2 for four or more individuals, and did not identify, assess, and correct the deficiencies. (3.2 & 3.4) OR
VSL_Matrix_Complete_2016_01_01.docx