PS-6

Personnel SecurityRev 5organization

Access Agreements

Baselines:LowModerateHighPrivacy

Control Statement

a. Develop and document access agreements for organizational systems; b. Review and update the access agreements [Assignment: frequency] ; and c. Verify that individuals requiring access to organizational information and systems: 1. Sign appropriate access agreements prior to being granted access; and 2. Re-sign access agreements to maintain access to organizational systems when access agreements have been updated or [Assignment: frequency].

Supplemental Guidance

Access agreements include nondisclosure agreements, acceptable use agreements, rules of behavior, and conflict-of-interest agreements. Signed access agreements include an acknowledgement that individuals have read, understand, and agree to abide by the constraints associated with organizational systems to which access is authorized. Organizations can use electronic signatures to acknowledge access agreements unless specifically prohibited by organizational policy.

Related Controls (10)

AC-17 PE-2 PL-4 PS-2 PS-3 PS-6 PS-7 PS-8 SA-21 SI-12

CCI Identifiers (12)

CCI-003035Develop and document access agreements for organizational systems.CCI-003036The organization ensures that individuals requiring access to organizational information and information systems re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or in accordance with organization-defined frequency.CCI-003037The organization defines the frequency for individuals requiring access to organization information and information systems to re-sign access agreements.CCI-004513Verify that individuals requiring access to organizational information sign appropriate access agreements prior to being granted access.CCI-004514Verify that individuals requiring access to organizational systems sign appropriate access agreements prior to being granted access.CCI-004516Verify that individuals requiring access to organizational systems re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or in accordance with organization-defined frequency.CCI-004515Verify that individuals requiring access to organizational information re-sign access agreements to maintain access to organizational information systems when access agreements have been updated or in accordance with organization-defined frequency.

Linked STIG Checks (0)

No STIG checks reference this control.