[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-800-53\u002Fps-3":3},{"item":4,"lessons":18,"controls":68,"related":98},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":13,"official_url":14,"link_label":15,"note":16,"updated_at":17},"nist-800-53","ps-3","PS-3","Personnel Screening",22,"US National Institute of Standards and Technology (NIST)","**What it asks for.** Individuals must be screened before they are authorised to access the system and rescreened according to defined conditions and frequencies.\n\n**In practice.** This means background checks proportionate to role and access level, within the limits of local employment and data protection law, which in many European countries restrict what can be checked. Higher-risk roles, such as privileged administrators or staff handling payments, may justify deeper screening. Auditors expect a screening policy, evidence that checks were completed before access was granted and records of rescreening where required.\n\n**Common gaps.** Access is often granted before screening is finished. Contractors and staff who move into sensitive roles are frequently not screened to the higher standard. Rescreening rules are also seldom defined.","a. Screen individuals prior to authorizing access to the system; and\n  b. Rescreen individuals in accordance with [Assignment: organization-defined organization-defined conditions requiring rescreening and, where rescreening is so indicated, the frequency of rescreening].\nDiscussion: Personnel screening and rescreening activities reflect applicable laws, executive orders, directives, regulations, policies, standards, guidelines, and specific criteria established for the risk designations of assigned positions. Examples of personnel screening include background investigations and agency checks. Organizations may define different rescreening conditions and frequencies for personnel accessing systems based on types of information processed, stored, or transmitted by the systems.","From NIST SP 800-53 Rev. 5, a work of the US government in the public domain.","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F53\u002Fr5\u002Fupd1\u002Ffinal","Open SP 800-53 at NIST",null,"2026-10-18T15:18:43.663+00:00",{"total":9,"list":19},[20,24,28,32,36,40,44,48,52,56,60,64],{"slug":21,"title":22,"published_at":23},"north-korean-it-workers-infiltrate-us-companies-via-laptop-farms-and-stolen-identities","North Korean IT Workers Infiltrate US Companies via Laptop Farms and Stolen Identities","2026-10-14T20:20:23.163+00:00",{"slug":25,"title":26,"published_at":27},"north-korean-it-worker-fraud-exposes-hiring-and-identity-verification-gaps","North Korean IT Worker Fraud Exposes Hiring and Identity Verification Gaps","2026-10-14T18:21:30.184+00:00",{"slug":29,"title":30,"published_at":31},"north-korean-remote-work-fraud-identity-theft-funds-weapons-programs","North Korean Remote Work Fraud: Identity Theft Funds Weapons Programs","2026-10-13T22:20:17.411+00:00",{"slug":33,"title":34,"published_at":35},"insider-threat-security-professional-moonlighting-as-cybercriminal","Insider Threat: Security Professional Moonlighting as Cybercriminal","2026-09-29T10:21:09.183+00:00",{"slug":37,"title":38,"published_at":39},"convicted-hackers-cybersecurity-role-highlights-insider-threat-risks","Convicted Hacker's Cybersecurity Role Highlights Insider Threat Risks","2026-09-28T18:21:56.222+00:00",{"slug":41,"title":42,"published_at":43},"north-korean-it-worker-infiltration-inside-the-laptop-farm-deception","North Korean IT Worker Infiltration: Inside the Laptop Farm Deception","2026-09-22T10:21:14.191+00:00",{"slug":45,"title":46,"published_at":47},"ransomware-groups-turn-to-insider-recruitment-as-external-defenses-improve","Ransomware Groups Turn to Insider Recruitment as External Defenses Improve","2026-09-01T22:21:00.92+00:00",{"slug":49,"title":50,"published_at":51},"north-korean-operatives-infiltrate-legitimate-companies-via-fake-job-applications","North Korean Operatives Infiltrate Legitimate Companies via Fake Job Applications","2026-08-31T18:20:40.594+00:00",{"slug":53,"title":54,"published_at":55},"north-korean-it-worker-infiltration-spotting-the-red-flags","North Korean IT Worker Infiltration: Spotting the Red Flags","2026-08-26T22:21:17.307+00:00",{"slug":57,"title":58,"published_at":59},"north-korean-operatives-infiltrate-companies-as-fake-remote-workers","North Korean Operatives Infiltrate Companies as Fake Remote Workers","2026-08-26T14:20:42.033+00:00",{"slug":61,"title":62,"published_at":63},"convicted-election-system-criminal-considered-for-election-role","Convicted Election System Criminal Considered for Election Role","2026-08-19T16:20:17.318+00:00",{"slug":65,"title":66,"published_at":67},"north-korean-it-workers-infiltrate-hiring-pipelines-to-exfiltrate-data","North Korean IT Workers Infiltrate Hiring Pipelines to Exfiltrate Data","2026-08-12T16:21:26.233+00:00",[69,74,79,84,89,93],{"slug":70,"name":71,"problem":72,"stories":73},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",11,{"slug":75,"name":76,"problem":77,"stories":78},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",7,{"slug":80,"name":81,"problem":82,"stories":83},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",5,{"slug":85,"name":86,"problem":87,"stories":88},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",4,{"slug":90,"name":91,"problem":92,"stories":88},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":94,"name":95,"problem":96,"stories":97},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",3,[99,105,110,114,119,125,130,133],{"family":100,"item":101,"code":102,"title":103,"together":104},"cis","6","Control 6","Access Control Management",19,{"family":5,"item":106,"code":107,"title":108,"together":109},"ac-2","AC-2","Account Management",17,{"family":111,"item":112,"code":113,"title":113,"together":73},"itil","overview","ITIL",{"family":100,"item":115,"code":116,"title":117,"together":118},"14","Control 14","Security Awareness and Skills Training",10,{"family":120,"item":121,"code":122,"title":123,"together":124},"gdpr","32","Article 32","Security of processing",9,{"family":5,"item":126,"code":127,"title":128,"together":129},"at-2","AT-2","Literacy Training and Awareness",8,{"family":100,"item":131,"code":132,"title":108,"together":78},"5","Control 5",{"family":134,"item":135,"code":136,"title":137,"together":78},"nist-csf","id-sc","ID.SC-4","Supply Chain Risk Management (CSF 1.1)"]