CMMC Level 2

CMMC Level 2 Personnel Security Policy Template

Covers both PS practices (3.9.1-3.9.2): screening individuals before CUI system access, and termination and transfer procedures to protect CUI upon departure or role change.

Buy Now - $37 Browse All Templates

✓ Instant download

✓ Editable .docx

✓ 30-day money-back guarantee

✓ Written by CISSP & CCSP

What You Get

What's Inside

Everything is included - no hidden extras, no consulting required.

✓Both PS practices (3.9.1-3.9.2) addressed with practice-level policy language
✓Personnel screening requirements before CUI system access authorization
✓Background check requirements by role and access level
✓CUI access authorization process and documentation
✓Termination: access revocation within 1 business day of separation
✓Asset return requirements upon termination (devices, badges, tokens)
✓Transfer and role change: access adjustment to reflect new role within 5 days
✓Contractor and vendor personnel screening requirements

Ideal For

Who This Is For

Whether you're building from scratch or formalizing what's already in place.

Defense Contractors

Documenting PS domain compliance - the two practices that govern who gets access to CUI systems

HR and IT Teams

Coordinating the pre-hire screening and offboarding access revocation process with documented policy support

MSPs

Providing DoD clients with PS domain documentation covering both the pre-access screening and termination requirements

Ready to Get Compliant?

$37

One-time purchase · Instant download · Editable .docx

Get the Template - $37

30-day money-back guarantee. If it doesn't work for you, get a full refund - no questions asked.

Common Questions

Frequently Asked Questions

Everything you need to know before you buy.

What CMMC practices does this cover?

Both Personnel Security practices: 3.9.1 (personnel screening before CUI access) and 3.9.2 (termination and transfer procedures).

What background check is required for practice 3.9.1?

NIST 800-171 does not specify a minimum background check type - it requires that individuals are screened before access. The policy provides language for a minimum background check requirement that you can adjust to your organization's standards.

What is the termination SLA?

The policy requires access revocation within 1 business day of separation. This is the standard assessors look for as evidence of practice 3.9.2 implementation.

What format does it come in?

Editable Microsoft Word (.docx). Compatible with Google Docs and LibreOffice.

Stop Starting From a Blank Page