800-53 · PS Personnel Security
PS-5
Personnel Transfer
Official texta. Review and confirm ongoing operational need for current logical and physical access authorizations to systems and facilities when individuals are reassigned or transferred to other positions within the organization;
b. Initiate [Assignment: organization-defined transfer or reassignment actions] within [Assignment: organization-defined time period following the formal transfer action];
c. Modify access authorization as needed to correspond with any changes in operational need due to reassignment or transfer; and
d. Notify [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period].NIST SP 800-53 Rev 5.2 control statement (public domain)
b. Initiate [Assignment: organization-defined transfer or reassignment actions] within [Assignment: organization-defined time period following the formal transfer action];
c. Modify access authorization as needed to correspond with any changes in operational need due to reassignment or transfer; and
d. Notify [Assignment: organization-defined personnel or roles] within [Assignment: organization-defined time period].NIST SP 800-53 Rev 5.2 control statement (public domain)
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| NIST CSF 2.0 | — | No requirement | No mapping in our data | No mapping in our data. |
| ISO 27001 | A.5.11A.6.5 | Return of assets; Responsibilities after termination or change of employment | Crosswalk | NIST SP 800-53 → ISO 27001 mapping |
| CIS v8.1 | — | No requirement | No mapping in our data | No mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards). |
| SOC 2 | — | No requirement | No mapping in our data | No mapping in our data (SOC 2 links are editorial only). |
| PCI DSS | — | No requirement | No mapping in our data | No mapping in our data. |
| CMMC | PS.L2-3.9.1PS.L2-3.9.2 | Screen Individuals; Personnel Actions | Crosswalk | NIST SP 800-171r2 Appendix D; NIST SP 800-171r3 03.09.02 → SP 800-53 |
| HIPAA | §164.308(a)(3)(ii)(B)§164.308(a)(3)(ii)(C) | Workforce Clearance Procedure; Termination Procedures | Crosswalk | NIST HIPAA → SP 800-53 crosswalk |
| GDPR | — | No requirement | No mapping in our data | No mapping in our data (only GDPR's security articles are mapped, editorially). |
| NIS2 | — | No requirement | No mapping in our data | No mapping in our data. |
| Essential Eight | — | No requirement | No mapping in our data | No mapping in our data (Essential Eight links are editorial only). |
| DORA | — | No requirement | No mapping in our data | No mapping in our data (DORA links are editorial, and its technical standards are not mapped). |
| CPS 234 | — | No requirement | No mapping in our data | No mapping in our data (CPS 234 is principles-based and its links are editorial). |
| Cyber Essentials | — | No requirement | No mapping in our data | No mapping in our data (Cyber Essentials covers five technical controls only). |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.