People Details

Domain

Summary

People are your greatest allies in protecting your organisation's information. They can also present a risk due to privileged access to information

Overview

It is important therefore to ensure that you know as much about them as possible before you employ them. This is usually done by taking up references, and in certain cases through formal vetting procedures. It is essential that new employees are given a briefing on their corporate and security responsibilities before, or immediately after employment. Employee contracts should also include security obligations and reminders should take place at regular intervals. Employees with special responsibility for security, or with privileged access to business systems should be adequately trained/qualified as appropriate. On termination of employment, user access privileges should be immediately withdrawn and the employee de-briefed on their post-employment confidentiality responsibilities.

Detailed Description

Reference/Support Links

Governing bodies/Certifiers/Legislation Links