HR-04 Disciplinary Measures

The cloud service provider ensures that the policies and procedures concerning disciplinary measures reflect applicable legal and regulatory requirements in accordance with SP-01.

In the event of violations of policies and procedures or applicable legal and regulatory requirements, actions are taken in accordance with a defined policy that includes the following aspects:

1. Verifying whether a violation has occurred; and

2. Consideration of the nature and severity of the violation and its impact.

The internal and external personnel of the cloud service provider is informed about possible disciplinary measures.

The use of disciplinary measures is appropriately documented.

Supplementary information

With regards to the use of disciplinary measures, the submission of anonymised evidence is acceptable and does not imply that the basic criterion is not fully fulfilled.