PS-7—External Personnel Security

Establish personnel security requirements, including security roles and responsibilities for external providers;

Require external providers to comply with personnel security policies and procedures established by the organization;

Document personnel security requirements;

Require external providers to notify ⚙organization-defined personnel or roles of any personnel transfers or terminations of external personnel who possess organizational credentials and/or badges, or who have system privileges within ⚙organization-defined time period; and

Monitor provider compliance with personnel security requirements.