PL-4: Rules of Behavior

before authorizing access to information and the system, a documented acknowledgement from such individuals indicating that they have read, understand, and agree to abide by the rules of behavior is received;

rules of behavior are reviewed and updated frequency ;

individuals who have acknowledged a previous version of the rules of behavior are required to read and reacknowledge pl-04_odp.02 .

Security and privacy planning policy

procedures addressing rules of behavior for system users

rules of behavior

signed acknowledgements

records for rules of behavior reviews and updates

other relevant documents or records

Organizational personnel with responsibility for establishing, reviewing, and updating rules of behavior

organizational personnel with responsibility for literacy training and awareness and role-based training

organizational personnel who are authorized users of the system and have signed and resigned rules of behavior

organizational personnel with information security and privacy responsibilities

Organizational processes for establishing, reviewing, disseminating, and updating rules of behavior

mechanisms supporting and/or implementing the establishment, review, dissemination, and update of rules of behavior