ComplianceNIST 800-53 control

NIST-PS-8 Personnel Sanctions

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
PS Personnel Security
Control
PS-8

Control statement

a. Employ a formal sanctions process for individuals failing to comply with established information security and privacy policies and procedures; and b. Notify [Assignment: personnel or roles] within [Assignment: time period] when a formal employee sanctions process is initiated, identifying the individual sanctioned and the reason for the sanction.

Discussion

Organizational sanctions reflect applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Sanctions processes are described in access agreements and can be included as part of general personnel policies for organizations and/or specified in security and privacy policies. Organizations consult with the Office of the General Counsel regarding matters of employee sanctions.

Related

Related control · Compliance (4)

  • NIST-PL-4 Rules of Behavior NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-PS-6 Access Agreements NIST 800-53 control
  • NIST-PT-1 Policy and Procedures NIST 800-53 control

Referenced by Compliance · has member (1)

  • NIST-PS Personnel Security NIST 800-53 family

Referenced by Compliance · related control (21)

  • NIST-AC-1 Policy and Procedures NIST 800-53 control
  • NIST-AT-1 Policy and Procedures NIST 800-53 control
  • NIST-AU-1 Policy and Procedures NIST 800-53 control
  • NIST-CA-1 Policy and Procedures NIST 800-53 control
  • NIST-CM-1 Policy and Procedures NIST 800-53 control
  • NIST-CP-1 Policy and Procedures NIST 800-53 control
  • NIST-IA-1 Policy and Procedures NIST 800-53 control
  • NIST-IR-1 Policy and Procedures NIST 800-53 control
  • NIST-MA-1 Policy and Procedures NIST 800-53 control
  • NIST-MP-1 Policy and Procedures NIST 800-53 control
  • NIST-PE-1 Policy and Procedures NIST 800-53 control
  • NIST-PL-1 Policy and Procedures NIST 800-53 control
  • NIST-PL-4 Rules of Behavior NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-PS-1 Policy and Procedures NIST 800-53 control
  • NIST-PS-6 Access Agreements NIST 800-53 control
  • NIST-RA-1 Policy and Procedures NIST 800-53 control
  • NIST-SA-1 Policy and Procedures NIST 800-53 control
  • NIST-SC-1 Policy and Procedures NIST 800-53 control
  • NIST-SI-1 Policy and Procedures NIST 800-53 control
  • NIST-SR-1 Policy and Procedures NIST 800-53 control