Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity In Human Resources
To ensure that cybersecurity risks and requirements related to personnel (employees and contractors) are managed efficiently prior to employment, during employment and after termination/separation as per organizational policies and procedures, and related laws and regulations.
-
1-9-1
Personnel cybersecurity requirements (prior to employment, during employment and after termination/separation) must be defined, documented and approved.
-
1-9-2
The personnel cybersecurity requirements must be implemented.
-
1-9-3
The personnel cybersecurity requirements prior to employment must include at least the following:
-
1-9-4
The personnel cybersecurity requirements during employment must include at least the following:
-
1-9-5
Personnel access to information and technology assets must be reviewed and removed immediately upon termination/separation.
-
1-9-6
Personnel cybersecurity requirements must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo