PS-3(4)

Requirement

Verify that individuals accessing a system processing, storing, or transmitting [Assignment: organization-defined information types] meet [Assignment: organization-defined citizenship requirements].

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Personnel security policy; access control policy, procedures addressing personnel screening; records of screened personnel; screening criteria; records of access authorizations; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for ensuring valid access authorizations for information requiring citizenship; organizational process for additional personnel screening for information requiring citizenship].

ID	Assessment Objectives
PS-03(04)	individuals accessing a system processing, storing, or transmitting <PS-03(04)_ODP[01] information types> meet <PS-03(04)_ODP[02] citizenship requirements>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!