hrs-05-termsofemployment.md

SCF - HRS-05 - Terms of Employment

Mechanisms exist to require all employees and contractors to apply cybersecurity & data privacy principles in their daily work.

Mapped framework controls

ISO 27001

• 7.3.a
• 7.3.b
• 7.3.c
• 7.3

ISO 27002

• A.5.14
• A.5.4
• A.6.2

NIST 800-53

• PL-4

SOC 2

• CC1.1

Control questions

Does the organization require all employees and contractors to apply cybersecurity & data privacy principles in their daily work?