PS-6(3)

Requirement
1. Notify individuals of applicable, legally binding post-employment requirements for protection of organizational information; and
2. Require individuals to sign an acknowledgment of these requirements, if applicable, as part of granting initial access to covered information.

Discussion

Organizations consult with the Office of the General Counsel regarding matters of post-employment requirements on terminated individuals.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Personnel security policy; procedures addressing access agreements for organizational information and systems; signed post-employment acknowledgement forms; access agreements; list of applicable, legally binding post-employment requirements; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with personnel security responsibilities; organizational personnel who have signed access agreements that include post-employment requirements; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Organizational processes for post-employment requirements; mechanisms supporting notifications and individual acknowledgements of post-employment requirements].

ID	Assessment Objectives
PS-06(03)(b)	individuals are required to sign an acknowledgement of applicable, legally binding post-employment requirements as part of being granted initial access to covered information.
PS-06(03)(a)	individuals are notified of applicable, legally binding post-employment requirements for the protection of organizational information;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!