---

id: "PS-03(03)" title: "Information Requiring Special Protective Measures" family: "PS" family_name: "Personnel Security" sort_id: "ps-03.03" priority: "P2" implementation_level: "organization" parent: "PS-03" enhancement: True

---

Statement

Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection:

Have valid access authorizations that are demonstrated by assigned official government duties; and

Satisfy {{ insert: param, ps-03.03_odp }}.

Guidance

Organizational information that requires special protection includes controlled unclassified information. Personnel security criteria include position sensitivity background screening requirements.

Assessment Objective: individuals accessing a system processing, storing, or transmitting information requiring special protection have valid access authorizations that are demonstrated by assigned official government duties;

Assessment Objective: individuals accessing a system processing, storing, or transmitting information requiring special protection satisfy {{ insert: param, ps-03.03_odp }}.

Personnel security policy

access control policy, procedures addressing personnel screening

records of screened personnel

screening criteria

records of access authorizations

system security plan

other relevant documents or records

Organizational personnel with personnel security responsibilities

organizational personnel with information security responsibilities

Organizational processes for ensuring valid access authorizations for information requiring special protection

organizational process for additional personnel screening for information requiring special protection