03.09: Personnel Security

Screen individuals prior to authorizing access to the system. Rescreen individuals in accordance with [Assignment: organization-defined conditions requiring rescreening].

When individual employment is terminated: Disable system access within [Assignment: organization-defined time period], Terminate or revoke authenticators and credentials associated with the individual, and Retrieve security-related system property. When individuals are reassigned or transferred to other positions in the organization: Review and confirm the ongoing operational need for current logical and physical access authorizations to…