PS-3(3) Information Requiring Special Protective Measures
Control enhancement of PS-3 Personnel Screening
Control
Verify that individuals accessing a system processing, storing, or transmitting information requiring special protection:
Have valid access authorizations that are demonstrated by assigned official government duties; and
Satisfy [Assignment: additional personnel screening criteria].
Discussion
Organizational information that requires special protection includes controlled unclassified information. Personnel security criteria include position sensitivity background screening requirements.
Need PS-3(3) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.