← CMMC Level 2
CMMC Level 2 / Control family · PS
Personnel Security
That people are screened before access, and access is revoked promptly when they leave or transfer.
2
requirements in this family
What it requires
The 2 requirements, in plain language.
3.9.1 Screen Individuals
Screen individuals prior to authorizing access to organizational systems containing CUI
3.9.2 Personnel Actions
Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers
NIST SP 800-171 Rev 2 — Family PS. CMMC Level 2 assesses each requirement's objectives via a C3PAO. NIST SP 800-171r2 →
How Aletheon covers it
One owner across the whole family — built, run, and proven.
Enclave builds these controls into the boundary as code; Cadence keeps them enforced between assessments; Attest proves them to the C3PAO against every objective.
See all fourteen families →Not sure which families your contract puts in scope?
A readiness check maps your environment to all 110 controls and tells you exactly where you stand.