03.15.03 Rules of Behavior

This policy establishes rules of behavior for all individuals who require access to Controlled Unclassified Information (CUI) and the systems that process, store, or transmit it. These rules aim to ensure the proper handling, protection, and use of CUI in accordance with applicable laws, regulations, and organizational security requirements.

• A.03.15.03.ODP[01]: the frequency at which the rules of behavior are reviewed and updated is defined.
• A.03.15.03.a: rules that describe responsibilities and expected behavior for system usage and protecting CUI are established.
• A.03.15.03.b: rules are provided to individuals who require access to the system.
• A.03.15.03.c: a documented acknowledgement from individuals indicating that they have read, understand, and agree to abide by the rules of behavior is received before authorizing access to CUI and the system.
• A.03.15.03.d[01]: the rules of behavior are reviewed <A.03.15.03.ODP[01]: frequency>.
• A.03.15.03.d[02]: the rules of behavior are updated <A.03.15.03.ODP[01]: frequency>.