PS-3(4)—Personnel Screening | Citizenship Requirements
IL4 Mod
IL4 High
IL5
IL6
>Control Description
Verify that individuals accessing a system processing, storing, or transmitting ⚙organization-defined information types meet ⚙organization-defined citizenship requirements.
>DoD Impact Level Requirements
DoD FedRAMP+ Parameters
All information systems. Users: U.S. citizens, U.S. nationals, or U.S. persons, foreign personnel as allowed by current DOD polices with AO approval. Administrators: U.S. citizens, U.S. nationals, or U.S. persons.
>Discussion
None.
>Assessment Interview Topics
Questions assessors commonly ask
Process & Governance:
- •What policies govern citizenship requirements for organizational personnel?
- •Who is responsible for implementing and overseeing citizenship requirements controls?
- •How does the organization coordinate citizenship requirements with HR and legal teams?
- •What is the process for handling exceptions to citizenship requirements requirements?
- •What governance exists for ensuring consistent application of citizenship requirements across the organization?
Technical Implementation:
- •What systems or tools technically implement citizenship requirements?
- •How are citizenship requirements activities integrated with HR and identity management systems?
- •What automation supports citizenship requirements enforcement and tracking?
- •What audit capabilities exist for citizenship requirements?
- •How are citizenship requirements requirements technically enforced in access control systems?
Evidence & Documentation:
- •Provide documented policies and procedures for citizenship requirements.
- •Provide personnel records demonstrating citizenship requirements implementation.
- •Provide evidence of citizenship requirements for all personnel with system access.
- •Provide records of citizenship requirements reviews and updates.
- •Provide documentation of coordination between citizenship requirements and HR processes.
Ask AI
Configure your API key to use AI features.