3.9 Personnel Security3 pts

3.9.1 — Screen people before access

Screen individuals prior to authorizing access to organizational systems containing CUI.

Individuals are screened before they're granted access to CUI.

What it actually means

Before someone gets access to CUI systems, they're screened to a level appropriate for the role (typically a background check). It's a personnel process, documented, applied consistently before access is granted.

Pass or fail — an assessor needs a "yes" to each

What to have ready

Where teams trip up

See where this control puts your score

Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.

Calculate your SPRS score →Draft your SSP language →

Connected requirements

More in Personnel Security (3.9)

← Back to the Control Library

The GovCon Compliance Brief
Get the next regulation change explained in plain English.

One CMMC / NIST 800-171 update, decoded, every other week. No spin, no sales pitch. Free.