+CON.7.A2 Raising Employee Awareness of Information Security When Travelling Abroad (B)

CON.7.A2 Raising Employee Awareness of Information Security When Travelling Abroad (B)

Users MUST be made aware of and receive training in the responsible handling of information technology and portable IT systems on trips abroad. Users MUST be aware of the threats that can arise from inappropriate handling of information, improper destruction of data and storage media, or malware and insecure data exchanges. The limits of the security safeguards in use MUST also be demonstrated. Users MUST be empowered and encouraged to prevent loss or theft or to seek professional advice in case of inconsistencies. In addition, the legal requirements for individual destinations in relation to travel security SHOULD be emphasised to employees. The Chief Information Security Officer MUST keep abreast of legal requirements in the context of information security (e.g. data protection, IT security law) and raise employee awareness in this regard.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.42 Social Engineering