hrs-02-positioncategorization.md

SCF - HRS-02 - Position Categorization

Mechanisms exist to manage personnel security risk by assigning a risk designation to all positions and establishing screening criteria for individuals filling those positions.

Mapped framework controls

ISO 27001

• 7.2.a

NIST 800-53

• PS-2

SOC 2

• CC1.2

Control questions

Does the organization manage personnel security risk by assigning a risk designation to all positions and establishing screening criteria for individuals filling those positions?