CMMC Practice PS.L2-3.9.1 – Screen Individuals: Screen individuals prior to authorizing access to organizational systems containing CUI.
Links to Publicly Available Resources
CMMC CLARIFICATION (Ref CMMC – Appendix B)
Make sure all employees who need access to CUI have the organization-defined screening before they get access. Base the types of screening on the requirements defined for that specific level of access.