Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.9.1

Screen Individuals Before Access

Official citation: 3.9.1

Class: core · Severity: high

Statement of the obligation — verify against source

3.9.1

What it means

Screen people before granting them access to systems that contain CUI — through background checks appropriate to the risk and any agency-specific requirements — so access is granted only to suitably vetted individuals.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.