An OSCAL Control
Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection:
Have valid access authorizations that are demonstrated by assigned official government duties; and
Satisfy additional personnel screening criteria .
Organizational information that requires special protection includes controlled unclassified information. Personnel security criteria include position sensitivity background screening requirements.
individuals accessing a system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties;
individuals accessing a system processing, storing, or transmitting information requiring special protection satisfy additional personnel screening criteria .
Personnel security policy
access control policy, procedures addressing personnel screening
records of screened personnel
screening criteria
records of access authorizations
system security plan
other relevant documents or records
Organizational personnel with personnel security responsibilities
organizational personnel with information security responsibilities
Organizational processes for ensuring valid access authorizations for information requiring special protection
organizational process for additional personnel screening for information requiring special protection