NIST SP 800-171 & CMMC 2.0 - 3.9.1

Screen individuals prior to authorizing access to organizational systems containing Federal Contract Information.

NIST SP 800-171 & CMMC 2.0 - 3.9.2

Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers.