Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-32425 | PE-07.03.01 | SV-42762r2_rule | PESP-1 | Low |
Description |
---|
Failure to properly out process through the security section allows the possibility of (unauthorized) continued access to the facility and/or the systems. |
STIG | Date |
---|---|
Traditional Security | 2013-07-11 |
Check Text ( C-40873r2_chk ) |
---|
Check outprocessing procedures. Review a sampling of personal security files of departed personnel to ensure compliance. Ensure the procedures and records of departed employees reviewed include removal from access to Government Information Systems, turning in all access badges, classified or sensitive information and signing of an SF 312 acknowledging the debriefing. NOTE: The SF 312 is only applicable for those persons holding a security clearance. TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) and personnel records should be in place. Not applicable to a field/mobile environment. |
Fix Text (F-36347r2_fix) |
---|
Ensure there are local procedures covering the outprocessing of departing employees (Military, Government Civilian and Contractor) and that records of departed employees on-hand reflect that outprocessing was conducted and include things such as, removal of access form Government Information Systems, turning in all access badges, classified or sensitive information and signing of an SF 312 acknowledging a debriefing. NOTE: The SF 312 is only applicable for those persons holding a security clearance. |