id: "PS-03(02)" title: "Formal Indoctrination" family: "PS" family_name: "Personnel Security" sort_id: "ps-03.02" priority: "P2" implementation_level: "organization" parent: "PS-03" enhancement: True
Statement
Verify that individuals accessing a system processing, storing, or transmitting types of classified information that require formal indoctrination, are formally indoctrinated for all the relevant types of information to which they have access on the system.
Guidance
Types of classified information that require formal indoctrination include Special Access Program (SAP), Restricted Data (RD), and Sensitive Compartmented Information (SCI).
Assessment Objective
individuals accessing a system processing, storing, or transmitting types of classified information that require formal indoctrination are formally indoctrinated for all of the relevant types of information to which they have access on the system.
Personnel security policy
procedures addressing personnel screening
indoctrination documents
records of screened personnel
system security plan
other relevant documents or records
Organizational personnel with personnel security responsibilities
organizational personnel with information security responsibilities
Organizational processes for formal indoctrination for all relevant types of information to which personnel have access