ISP Personnel Security & Insider Threats Flashcards

The 'need-to-know' principle in personnel security means:

Answer: Access to specific information is granted only when operationally necessary for assigned duties

Need-to-know limits access to information to only what is required for a person to perform their specific job functions.

Which process is used to verify that employees only retain access rights appropriate to their current role?

Answer: Access recertification or entitlement review

Access recertification (entitlement review) is the formal process of confirming that each user's permissions still match their job requirements.

When an employee is terminated, which security action should be taken IMMEDIATELY?

Answer: Revoking all logical and physical access simultaneously upon departure

Simultaneous revocation of all access upon termination prevents a departing employee from exfiltrating data or entering the facility.

Social engineering targeting employees is BEST countered by:

Answer: Ongoing security awareness training and clear reporting procedures

Awareness training equips employees to recognize social engineering tactics and empowers them to report suspicious contacts.

What does 'two-person integrity' (TPI) primarily protect against in a personnel security context?

Answer: A single insider acting alone to commit theft or sabotage of critical assets

TPI requires two authorized individuals to be present during access to sensitive areas or materials, preventing unilateral insider action.

Which federal guideline governs adjudicative standards for personnel security clearances in U.S. industrial environments?

Answer: The 13 Adjudicative Guidelines (Security Executive Agent Directive 4)

SEAD 4 establishes the 13 Adjudicative Guidelines used to evaluate individuals for U.S. government-related security clearances.