Establish personnel security requirements including security roles and responsibilities for external providers, require them to comply with the organisation's personnel security policies and procedures, document the requirements, require providers to notify the information security, personnel security, account management personnel or administrators within 24 hours of transfers or terminations of external personnel holding organisational credentials, badges or system privileges, and monitor provider compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.