GV.RR-04 Cybersecurity is included in human resources practices

Statement

Cybersecurity is included in human resources practices

Guidance

Integrate cybersecurity risk management considerations into human resources processes (e.g., personnel screening, onboarding, change notification, offboarding)

Guidance

Consider cybersecurity knowledge to be a positive factor in hiring, training, and retention decisions

Guidance

Conduct background checks prior to onboarding new personnel for sensitive roles, and periodically repeat background checks for personnel with such roles

Guidance

Define and enforce obligations for personnel to be aware of, adhere to, and uphold security policies as they relate to their roles

1. Преглед

1.1 Препратки

• 10.1 Human resources security
• 10.2 Verification of background
• 10.3 Termination or change of employment procedures

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

3. Свързани регулации

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final