Establish, implement, and maintain a travel program for all personnel.
CONTROL ID 10597
CONTROL TYPE Human Resources Management
CLASSIFICATION Preventive
SUPPORTING AND SUPPORTED CONTROLS
This Control directly supports the implied Control(s):
Establish, implement, and maintain an occupational health and safety policy., CC ID: 00716
This Control has the following implementation support Control(s):
Establish, implement, and maintain a process to identify any potential health hazards, environmental hazards, or safety hazards, that could affect personnel while traveling internationally., CC ID: 06076
Refrain from using gifted mobile devices., CC ID: 16460
Refrain from loaning mobile devices to unauthorized personnel., CC ID: 15218
Issue devices with secure configurations to individuals traveling to locations deemed to be of risk., CC ID: 10598
Scan devices for malicious code when an individual returns from locations deemed to be of risk., CC ID: 10599
SELECTED AUTHORITY DOCUMENTS COMPLIED WITH
Measures for travelling (e.g. viewing by authorities), (2.1.4 Requirements (should) Bullet 1 Sub-Bullet 1, Information Security Assessment, Version 5.1)
Measures for travelling to security-critical countries. (2.1.4 Requirements (should) Bullet 1 Sub-Bullet 2, Information Security Assessment, Version 5.1)
When devices are authorized to access CJI outside the U.S., agencies shall perform an inspection to ensure that all controls are in place and functioning properly in accordance with the agency's policies prior to and after deployment outside of the U.S. (§ 5.13.1.2.1 ¶ 2, Criminal Justice Information Services (CJIS) Security Policy, CJISD-ITS-DOC-08140-5.8, Version 5.8)
