hrs-041-roleswithspecialprotectionmeasures.md

SCF - HRS-04.1 - Roles With Special Protection Measures

Mechanisms exist to ensure that individuals accessing a system that stores, transmits or processes information requiring special protection satisfy organization-defined personnel screening criteria.

Mapped framework controls

ISO 27002

• A.5.2
• A.6.1

SOC 2

• CC1.4

Control questions

Does the organization ensure that individuals accessing a system that stores, transmits or processes information requiring special protection satisfy organization-defined personnel screening criteria?