controlPS-6

Access Agreements (PS-6)

Develop and document access agreements for organizational systems; Review and update the access agreements [organization-defined] ; and Verify that individuals requiring access to organizational information and systems:

Security Baselines

LOWMODERATEHIGH

personnel-securityscreeningtermination

Why These Connect

Maps To2

These are equivalent or closely aligned requirements in other frameworks.

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports20

These related controls work together — a change to one may affect the others.

Enhances3

These enhancements add specific capabilities or refinements to the base control.

Related Controls(12)

PE-2Physical Access Authorizations (PE-2)

LMH

PE-3Physical Access Control (PE-3)

LMH

PL-4Rules of Behavior (PL-4)

LMH

PS-2Position Risk Designation (PS-2)

LMH

PS-3Personnel Screening (PS-3)

LMH

PS-4Personnel Termination (PS-4)

LMH

AC-17Remote Access (AC-17)

LMH

PS-6Access Agreements (PS-6)

LMH

PS-7External Personnel Security (PS-7)

LMH

PS-8Personnel Sanctions (PS-8)

LMH

SA-21Developer Screening (SA-21)

SI-12Information Management and Retention (SI-12)

LMH

Cross-Framework Mappings(2)

ISO 27001ISO/IEC 27001:20224 mappingsFinal

NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022

HIPAAHIPAA Security Rule9 mappingsFinal

NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5

Organization-Defined Parameters(2)

Assignmentorganization-defined frequency

Control Enhancements(3)

PS-6(1)Information Requiring Special Protection (PS-6(1))W

PS-6(2)Classified Information Requiring Special Protection (PS-6(2))

PS-6(3)Post-employment Requirements (PS-6(3))