Authorised Economic Operator (AEO) Programmes - Global Standards AEO-8: Personnel Security

What else in your programme already covers this

This control maps to 18 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CMMC 2.0 · 2 controls

PE.L2-3.10.3 Escort Visitors
PS.L2-3.9.1 Screen Individuals

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DCS-09 Secure Area Authorization
CCM-HRS-01 Background Screening Policy and Procedures

HIPAA Security Rule · 2 controls

164.308(a)(3)(ii)(B) Workforce Clearance Procedure (Addressable)
164.310(a)(2)(iii) Access Control and Validation Procedures (Addressable)

NIST SP 800-66 Rev 2 · 2 controls

164.308(a)(3)(ii)(B) Workforce Clearance Procedure (Addressable)
164.310(a)(2)(iii) Access Control and Validation Procedures (Addressable)

SOC 2 · 2 controls

SOC2-CC1.4 CC1.4 Attracting, developing and retaining competent people (COSO principle 4)
SOC2-CC6.4 CC6.4 Restricting physical access to facilities and assets

FedRAMP High · 1 control

PS-3 Personnel Screening

FedRAMP Moderate · 1 control

PS-3 Personnel Screening

ISO 27001:2022 · 1 control

6.1 Screening

ISO 27002:2022 · 1 control

6.1 Screening

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-GV.RR-04 Cybersecurity is included in human resources practices

NIST SP 800-171 Rev 3 · 1 control

03.09.01 Personnel Screening

NIST SP 800-53 Rev 5 · 1 control

NIST800-PS-3 PS-3 Personnel Screening

PCI DSS 4.0 · 1 control

12.7.1 12.7.1 Pre-hire screening of personnel with CDE access

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.