GV.RR-04 Cybersecurity is included in human resources practices

Statement

Cybersecurity is included in human resources practices

Example

Integrate cybersecurity risk management considerations into human resources processes (e.g., personnel screening, onboarding, change notification, offboarding)

Example

Consider cybersecurity knowledge to be a positive factor in hiring, training, and retention decisions

Example

Conduct background checks prior to onboarding new personnel for sensitive roles, and periodically repeat background checks for personnel with such roles

Example

Define and enforce obligations for personnel to be aware of, adhere to, and uphold security policies as they relate to their roles

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final