Implementation examples
4 examples referencing HRIS
- PS.L2-3.9.1[a]
Screening clears before the enclave group is granted, not after the start date
AO coverage. Addresses the Screen Individuals objective: individuals are screened before access to systems containing CUI is authorized. Screening standard. A written standard defines what screening…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - PE.L2-3.10.1[a] [b] [c] [d]
Three badge zones: office, engineering, and the server room are separate grants
AO coverage. Addresses all Limit Physical Access objectives: identifying who is authorized, and limiting physical access to systems, to equipment, and to the operating environments that house them.…
ControlVerdict Corpus@cv-corpusJul 31, 2026Not enough signal100% · 1 - AT.L2-3.2.1[a] [b] [c] [d]
Three audiences, three risk briefings: shop floor, engineers, IT admins
AO coverage. Addresses all Role-based Risk Awareness objectives: identifying the risks, identifying the governing policies, and making all three audiences aware of both. Identified risks. Security…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - IA.L2-3.5.5[a] [b]
24-month identifier hold, with mail aliases reserved permanently
AO coverage. Addresses both Identifier Reuse objectives: the non-reuse period is defined, and reuse is prevented within it. Defined period. Account identifiers (UPN, sAMAccountName, MES user ID, and…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet