PS-4: Personnel Termination

upon termination of individual employment, system access is disabled within time period ;

upon termination of individual employment, any authenticators and credentials are terminated or revoked;

upon termination of individual employment, exit interviews that include a discussion of information security topics are conducted;

upon termination of individual employment, all security-related organizational system-related property is retrieved;

upon termination of individual employment, access to organizational information and systems formerly controlled by the terminated individual are retained.

Personnel security policy

procedures addressing personnel termination

records of personnel termination actions

list of system accounts

records of terminated or revoked authenticators/credentials

records of exit interviews

system security plan

other relevant documents or records

Organizational personnel with personnel security responsibilities

organizational personnel with account management responsibilities

system/network administrators

organizational personnel with information security responsibilities

Organizational processes for personnel termination

mechanisms supporting and/or implementing personnel termination notifications

mechanisms for disabling system access/revoking authenticators