Hello, I was just informed by my company’s security department that my CI Poly is out of scope by a few weeks and need to urgently schedule one with the agency I am supporting.
My only concern is that my last poly took place in early 2022. Aren’t they good for 5 years unless I’m missing something?
Can anyone shed some light on this?
You should be good. I think your company is not using correct words.
Under CE, they can call you to do one whenever they like.
Also, some agencies now do “aperiodic” testing, so maybe your name just popped up on the list. @bebe1979 makes a good point too… we are operating under a new set of rules.
Hello, it turns out that another agency conducted my ci but the current agency did not have to date information on their SOR lol. Everything is well. Thank you guys for your input. I appreciate you all!