CMMC Practice PS.L2-3.9.1

Screen individuals prior to authorizing access to organizational systems containing CUI.

Monarch ISC Guidance

The organization will need to develop a policy in conjunction with Human Resources and your legal team. HR will provide appropriate guidance on when to get approval from potential hires to conduct the screenings, along with the correct procedures. The results should be kept with your HR department in their personnel file. A key decision point will be when to re-evaluate or conduct additional checks. Will your company conduct checks only at hire, or repeat them every year? Every other year? Whatever the decision, be sure to put it in your policy.

Security Catapult

Be prepared for CMMC

Our Q&A assessment tool is designed by security advisors for MSPs and DoD contractors of all sizes.

Try now for free

Security Catapult

Understand your gaps

See compliance gaps, compliance scores and proactive security tasks in a single interface.

Try now for free

Security Catapult

Validate NIST SP 800-171

Based on your CMMC answers, we let you know where you stand on NIST.

Try now for free

Security Catapult

Build a plan of action

Track your burn down and stay on top of security needs.

Try now for free

Security Catapult

Build your policy

Say goodbye to maintaining a security policy. We do it for you.

Try now for free

Discussion From Source

DRAFT NIST SP 800-171 R2 Personnel security screening (vetting) activities involve the evaluation/assessment of individual’s conduct, integrity, judgment, loyalty, reliability, and stability (i.e., the trustworthiness of the individual) prior to authorizing access to organizational systems containing CUI. The screening activities reflect applicable federal laws, Executive Orders, directives, policies, regulations, and specific criteria established for the level of access required for assigned positions.