PS-3(2): Formal Indoctrination

Control Family:

Personnel Security

Parent Control:

PS-3: Personnel Screening

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-6
PR.DS-5
PR.IP-11

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
PS-3(2): Formal Indoctrination

Control Statement

The organization ensures that individuals accessing an information system processing, storing, or transmitting types of classified information which require formal indoctrination, are formally indoctrinated for all of the relevant types of information to which they have access on the system.

Supplemental Guidance

Types of classified information requiring formal indoctrination include, for example, Special Access Program (SAP), Restricted Data (RD), and Sensitive Compartment Information (SCI).