unified
UC-HR-01 — Screen personnel commensurate with position risk
Every position is assigned a risk designation that determines its screening requirements and is reviewed as roles change. Background verification, including identity, employment and education history, and criminal or other checks as permitted by law, is completed before employment and before access to systems or sensitive information, proportional to position risk and data sensitivity. Personnel in high-risk roles are rescreened at defined intervals, and screening records are retained.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Human Resources / Personnel Security
- type
- preventive
- category
- administrative
Details
- unified_id
- UC-HR-01
- title
- Screen personnel commensurate with position risk
- statement
- Every position is assigned a risk designation that determines its screening requirements and is reviewed as roles change. Background verification, including identity, employment and education history, and criminal or other checks as permitted by law, is completed before employment and before access to systems or sensitive information, proportional to position risk and data sensitivity. Personnel in high-risk roles are rescreened at defined intervals, and screening records are retained.
- domain
- Human Resources / Personnel Security
- control_type
- preventive
- control_category
- administrative
- members
- framework
- nist-800-53
- control_id
- PS-2
- coverage
- full
- relationship
- superset_of
- framework
- nist-800-53
- control_id
- PS-3
- coverage
- full
- relationship
- superset_of
- framework
- iso-27001
- control_id
- A.6.1
- coverage
- full
- relationship
- superset_of
- framework
- hipaa
- control_id
- HIPAA-164.308
- coverage
- partial
- delta
- risk analysis, training, contingency, evaluation, and BAAs satisfied in other domains
- relationship
- intersects_with
- guidance
Source
No record-specific source URL is provided.
Connections
- Employee Onboarding operates UC-HR-01 — Screen personnel commensurate with position risk
- UC-HR-01 — Screen personnel commensurate with position risk mitigates Insufficient personnel screening and vetting
- strength
- primary
- rationale
- Background verification and position-risk vetting before access is the operative defense against placing unvetted, insider-threat, or compromised individuals in roles.
- Security Control Assessment & POA&M Remediation tests UC-HR-01 — Screen personnel commensurate with position risk
- ISO 27001 Stage 2 Annex A Controls Audit tests UC-HR-01 — Screen personnel commensurate with position risk
- UC-HR-01 — Screen personnel commensurate with position risk maps_to A.6.1 — Screening
- framework
- iso-27001
- control_id
- A.6.1
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- 2022
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- ISO 27001 SoA Review & Controls Assessment oversees UC-HR-01 — Screen personnel commensurate with position risk
- UC-HR-01 — Screen personnel commensurate with position risk mitigates Discrimination, harassment and hostile-workplace culture
- strength
- related
- rationale
- UC-HR-01 — Screen personnel commensurate with position risk maps_to HIPAA-164.308 — Administrative safeguards (security management, risk analysis, workforce security, training, contingency plan, evaluation, BAAs)
- framework
- hipaa
- control_id
- HIPAA-164.308
- coverage
- partial
- delta
- risk analysis, training, contingency, evaluation, and BAAs satisfied in other domains
- relationship
- intersects_with
- source_version
- 45 CFR Parts 160/164 (Security, Privacy, Breach Notification)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- SOC 2 Type II Interim Testing tests UC-HR-01 — Screen personnel commensurate with position risk
- UC-HR-01 — Screen personnel commensurate with position risk maps_to PS-2 — Position Risk Designation
- framework
- nist-800-53
- control_id
- PS-2
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-HR-01 — Screen personnel commensurate with position risk maps_to PS-3 — Personnel Screening
- framework
- nist-800-53
- control_id
- PS-3
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- Rev. 5
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- Personnel Screening, Agreements & Sanctions Administration operates UC-HR-01 — Screen personnel commensurate with position risk