---

id: "PS-09" title: "Position Descriptions" family: "PS" family_name: "Personnel Security" sort_id: "ps-09" priority: "P2" implementation_level: "organization"

---

Statement

Incorporate security and privacy roles and responsibilities into organizational position descriptions.

Guidance

Specification of security and privacy roles in individual organizational position descriptions facilitates clarity in understanding the security or privacy responsibilities associated with the roles and the role-based security and privacy training requirements for the roles.

Assessment Objective: security roles and responsibilities are incorporated into organizational position descriptions;

Assessment Objective: privacy roles and responsibilities are incorporated into organizational position descriptions.

Personnel security policy

personnel security procedures

procedures addressing position descriptions

security and privacy position descriptions

system security plan

privacy plan

privacy program plan

other relevant documents or records

Organizational personnel with personnel security responsibilities

organizational personnel with information security and privacy responsibilities

organizational personnel with human capital management responsibilities

Organizational processes for managing position descriptions