3.9.1 – Screen individuals prior to authorizing access to organizational systems containing CUI

This control requires organizations to conduct background screening for individuals before granting them access to systems that handle Controlled Unclassified Information (CUI). This applies to both employees and contractors.
Read the full blog breakdown of 3.9.1