OSCAL Parameters within IR-9.4: Exposure to Unauthorized Personnel
controls employed for personnel exposed to information not within assigned access authorizations are defined;