Outprocessing Procedures for Departing or Terminated Employees (Military, Government Civilian and Contractor)

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32425	PE-07.03.01	SV-42762r2_rule	PESP-1	Low

Description
Failure to properly out process through the security section allows the possibility of (unauthorized) continued access to the facility and/or the systems.

STIG	Date
Traditional Security	2013-07-11

Details

Check Text ( C-40873r2_chk )

Check outprocessing procedures. Review a sampling of personal security files of departed personnel to ensure compliance. Ensure the procedures and records of departed employees reviewed include removal from access to Government Information Systems, turning in all access badges, classified or sensitive information and signing of an SF 312 acknowledging the debriefing. NOTE: The SF 312 is only applicable for those persons holding a security clearance. TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) and personnel records should be in place. Not applicable to a field/mobile environment.

Fix Text (F-36347r2_fix)

Ensure there are local procedures covering the outprocessing of departing employees (Military, Government Civilian and Contractor) and that records of departed employees on-hand reflect that outprocessing was conducted and include things such as, removal of access form Government Information Systems, turning in all access badges, classified or sensitive information and signing of an SF 312 acknowledging a debriefing. NOTE: The SF 312 is only applicable for those persons holding a security clearance.