Under active development Content is continuously updated and improved

PS-6(3)Access Agreements | Post-employment Requirements

IL5
IL6

>Control Description

(a) Notify individuals of applicable, legally binding post-employment requirements for protection of organizational information; and (b) Require individuals to sign an acknowledgment of these requirements, if applicable, as part of granting initial access to covered information.

>DoD Impact Level Requirements

No specific parameter values or requirements for this impact level.

>Discussion

Organizations consult with the Office of the General Counsel regarding matters of post-employment requirements on terminated individuals.

>Related Controls

>Assessment Interview Topics

Questions assessors commonly ask

Process & Governance:

  • What policies govern post-employment requirements for organizational personnel?
  • Who is responsible for implementing and overseeing post-employment requirements controls?
  • How does the organization coordinate post-employment requirements with HR and legal teams?
  • What is the process for handling exceptions to post-employment requirements requirements?
  • What governance exists for ensuring consistent application of post-employment requirements across the organization?

Technical Implementation:

  • What systems or tools technically implement post-employment requirements?
  • How are post-employment requirements activities integrated with HR and identity management systems?
  • What automation supports post-employment requirements enforcement and tracking?
  • What audit capabilities exist for post-employment requirements?
  • How are post-employment requirements requirements technically enforced in access control systems?

Evidence & Documentation:

  • Provide documented policies and procedures for post-employment requirements.
  • Provide personnel records demonstrating post-employment requirements implementation.
  • Provide evidence of post-employment requirements for all personnel with system access.
  • Provide records of post-employment requirements reviews and updates.
  • Provide documentation of coordination between post-employment requirements and HR processes.

Ask AI

Configure your API key to use AI features.