PS-7 External Personnel Security

Control statement

a. Establish personnel security requirements, including security roles and responsibilities for external providers;
    b. Require external providers to comply with personnel security policies and procedures established by the organization;
    c. Document personnel security requirements;
    d. Require external providers to notify {{ insert: param, ps-07_odp.01 }} of any personnel transfers or terminations of external personnel who possess organizational credentials and/or badges, or who have system privileges within {{ insert: param, ps-07_odp.02 }} ; and
    e. Monitor provider compliance with personnel security requirements.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators