AssureSwarm

workflow

Personnel Screening, Agreements & Sanctions Administration

Runs on the existing "Personnel Security Administration" Process item (process_type: security_process; process_owner: the HR Personnel Security Partner): each cycle is one workflow instance attached to that Process - enriching the standing process, never creating a duplicate - and on the disciplinary track the violation-case Issue it opens becomes the cycle's second anchor, linked back to that Process. A modular, decision-aware workflow: it designates position risk, runs proportional background verification for new hires, role changes, and the annual high-risk rescreen sweep, produces and retains the signed employment security and confidentiality agreements required before access, and - when a policy violation is reported - runs the graduated disciplinary process through sanction determination, PS-8 notification, and retention. It originates on its own HR triggers (no upstream workflow feeds it) and hands access provisioning and revocation to the downstream Joiner-Mover-Leaver Access Lifecycle workflow rather than performing them here. Named deliverables per cycle: the position-risk designation memo and derived screening set, the background-verification packet, the signed employment security and confidentiality agreements plus security-bearing position description, the violation-case Issue, the sanction documentation and PS-8 notification record, the awareness and control-improvement feedback Issues, and the archived cycle record. In scope: one personnel-security trigger per cycle - a single new hire, role change, annual high-risk rescreen, or material agreement re-signature on the screening-and-agreements track, or one reported policy violation on the disciplinary track; a role change that also surfaces a violation is run as two separate cycles.

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

domain
grc
department
hr
lineOfDefense
operate

Details

teams
  • hr
domains
  • grc
standards
  • nist-800-53
  • iso-27001
  • hipaa
sourceTemplateId
workflow-library:grc-personnel-screening-agreements-sanctions-administration
releaseId
sha256:d2e485a453e0634692cb0eeb10d2b2baf6047d54c4c8148e28914b9b78f59cd9
canonicalUrl
https://workflow-library.com/all/?w=grc-personnel-screening-agreements-sanctions-administration
capabilities
    mappingStatus
    mapped
    lineOfDefense
    operate
    controls
    • UC-HR-01
    • UC-HR-02
    • UC-HR-04
    roleIntegrity
    activityCount
    0
    ermPhases
      lineRoles
        serviceModes
          warnings

            Source

            No record-specific source URL is provided.

            Download workflow template · Release: sha256:d2e485a453e0634692cb0eeb10d2b2baf6047d54c4c8148e28914b9b78f59cd9

            Connections