controlPS-3

Personnel Screening (PS-3)

Screen individuals prior to authorizing access to the system; and Rescreen individuals in accordance with [organization-defined].

Security Baselines

LOWMODERATEHIGH

personnel-securityscreeningtermination

Why These Connect

Maps To2

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports17

These related controls work together — a change to one may affect the others.

Enhances4

These enhancements add specific capabilities or refinements to the base control.

Related Controls(11)

AC-3Access Enforcement (AC-3)

LMH

IA-4Identifier Management (IA-4)

LMH

PE-2Physical Access Authorizations (PE-2)

LMH

PE-3Physical Access Control (PE-3)

LMH

PM-12Insider Threat Program (PM-12)PS-2Position Risk Designation (PS-2)

LMH

AC-2Account Management (AC-2)

LMH

MA-5Maintenance Personnel (MA-5)

LMH

PS-6Access Agreements (PS-6)

LMH

PS-7External Personnel Security (PS-7)

LMH

SA-21Developer Screening (SA-21)

Cross-Framework Mappings(2)

ISO 27001ISO/IEC 27001:20221 mappingFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

HIPAAHIPAA Security Rule1 mappingFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined conditions requiring rescreening

Assignmentorganization-defined frequency

Control Enhancements(4)

PS-3(1)Classified Information (PS-3(1))

PS-3(2)Formal Indoctrination (PS-3(2))

PS-3(3)Information Requiring Special Protective Measures (PS-3(3))

PS-3(4)Citizenship Requirements (PS-3(4))