{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:d1d4fd8db54ba2c4c265595e583dc0d1ec7925afaee91160bfcc6b2ff115056f","slug":"grc-personnel-screening-agreements-sanctions-administration","url":"/assets/agent_workflow-grc-personnel-screening-agreements-sanctions-administration-57db5b14.78a20ad2ffe07397.json"},"kind":"record","record":{"attributes":{"department":"hr","domain":"grc","lineOfDefense":"operate"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-personnel-screening-agreements-sanctions-administration","description":"Runs on the existing \"Personnel Security Administration\" Process item (process_type: security_process; process_owner: the HR Personnel Security Partner): each cycle is one workflow instance attached to that Process - enriching the standing process, never creating a duplicate - and on the disciplinary track the violation-case Issue it opens becomes the cycle's second anchor, linked back to that Process. A modular, decision-aware workflow: it designates position risk, runs proportional background verification for new hires, role changes, and the annual high-risk rescreen sweep, produces and retains the signed employment security and confidentiality agreements required before access, and - when a policy violation is reported - runs the graduated disciplinary process through sanction determination, PS-8 notification, and retention. It originates on its own HR triggers (no upstream workflow feeds it) and hands access provisioning and revocation to the downstream Joiner-Mover-Leaver Access Lifecycle workflow rather than performing them here. Named deliverables per cycle: the position-risk designation memo and derived screening set, the background-verification packet, the signed employment security and confidentiality agreements plus security-bearing position description, the violation-case Issue, the sanction documentation and PS-8 notification record, the awareness and control-improvement feedback Issues, and the archived cycle record. In scope: one personnel-security trigger per cycle - a single new hire, role change, annual high-risk rescreen, or material agreement re-signature on the screening-and-agreements track, or one reported policy violation on the disciplinary track; a role change that also surfaces a violation is run as two separate cycles.","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=grc-personnel-screening-agreements-sanctions-administration","capabilities":[],"controls":["UC-HR-01","UC-HR-02","UC-HR-04"],"domains":["grc"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:d1d4fd8db54ba2c4c265595e583dc0d1ec7925afaee91160bfcc6b2ff115056f","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:grc-personnel-screening-agreements-sanctions-administration","standards":["nist-800-53","iso-27001","hipaa"],"teams":["hr"]},"download":{"releaseId":"sha256:d1d4fd8db54ba2c4c265595e583dc0d1ec7925afaee91160bfcc6b2ff115056f"},"history":{"digest":"3ab8f6f5a254f2f2fe122e5aeb1484c6b8eae38dff3e9ec36f86c808da63356e","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:G25","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AG25","slug":"grc-personnel-screening-agreements-sanctions-administration","sourceIds":["hipaa","iso-27001","nist-800-53"],"sourceUrl":null,"title":"Personnel Screening, Agreements & Sanctions Administration","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:38805ad4453a6a209d92fc85fb3c05e329471ee52082ee2d100823409d2cebda","properties":{},"sourceDetailPath":"/data/v1/records/wf-g25-fdd65bfd.json","sourceId":"wf:G25","targetDetailPath":"/data/v1/records/uc-uc-hr-02-a54c8912.json","targetId":"uc:UC-HR-02","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:e3b0736dbbee585a3efb5354435c34dbb8d89994a4fdfa7ee62bb70b1bfacb9d","properties":{},"sourceDetailPath":"/data/v1/records/wf-g25-fdd65bfd.json","sourceId":"wf:G25","targetDetailPath":"/data/v1/records/uc-uc-hr-04-a71cf995.json","targetId":"uc:UC-HR-04","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:fdc9f7db49a3601597ca5792f50302eddf6ed6246561f19243008acaf093bcc9","properties":{},"sourceDetailPath":"/data/v1/records/wf-g25-fdd65bfd.json","sourceId":"wf:G25","targetDetailPath":"/data/v1/records/uc-uc-hr-01-c7e14dc5.json","targetId":"uc:UC-HR-01","type":"operates"}],"schemaVersion":1}