|
+HR-01.01AC |
1. ÜbersichtHR-01.01ACThe cloud service provider defines in the human resource policy positions with levels and risk classification that require regular assessment of competence and integrity. The cloud service provider annually reviews their assessment of competence and integrity for personnel belonging to the defined positions.Cloud service providers can implement various methods to assess competence and integrity of personnel in high risk positions, such as: 1. Self-disclosure of significant financial interests to determine conflicts of interest and susceptibility to blackmail; 2. Regular checking of certificates of good conduct, police clearance or other national equivalents; 3. Regular self-declaration of commitment with applicable policies and obligations; 4. Enforcing regular ethics and compliance trainings, including certification and testing of the personnel's understanding of applicable requirements and policies; 5. Enforcing regular participation in assessment centers to evaluate personnel's competence and integrity; and 6. Regular checks of personnel against national and international sanctions lists.
1.1 Referenzen1.2 Identifizierte Anforderungen1.2 Related Regulation2. Identifizierte Anforderungen
3. Related Regulations
|