Requirement
The personnel cybersecurity requirements must be implemented.
Control Implementation Guidelines
- Implement all personnel-related cybersecurity requirements that have been identified, documented and approved in the Human Resources Cybersecurity Policy
- Develop an action plan to implement cybersecurity requirements related to the personnel of the organization
- Include personnel cybersecurity requirements in the organization's HR procedures to ensure compliance with cybersecurity requirements for all internal and external stakeholders
Expected Deliverables
- Documents that confirm the implementation of cybersecurity requirements related to personnel as documented in the HR Cybersecurity Policy
- Cybersecurity Function Personnel Contract Forms (signed copy)
- Screening or vetting requests for the personnel of cybersecurity functions and technical functions with privileged access
