PS-4(2): Automated Notification

Control Family:

Personnel Security

CSF v1.1 References:

Baselines:

  • High

Next Version:

Control Statement

The organization employs automated mechanisms to notify [Assignment: organization-defined personnel or roles] upon termination of an individual.

Supplemental Guidance

In organizations with a large number of employees, not all personnel who need to know about termination actions receive the appropriate notifications - or, if such notifications are received, they may not occur in a timely manner. Automated mechanisms can be used to send automatic alerts or notifications to specific organizational personnel or roles (e.g., management personnel, supervisors, personnel security officers, information security officers, systems administrators, or information technology administrators) when individuals are terminated. Such automatic alerts or notifications can be conveyed in a variety of ways, including, for example, telephonically, via electronic mail, via text message, or via websites.