PR.IP-11

Cybersecurity is included in human resources practices

Protect · Information Protection

Manual Attestation

Compliance Score

Not Assessed

Documentation Maturity

1/ 5

Target: 2.5

Implementation Maturity

1/ 5

Target: 2.5

Control Description

Background checks are performed for personnel with access to critical systems. Security responsibilities are included in employment agreements. Offboarding includes timely revocation of access.

Remediation Guidance

Include cybersecurity clauses in employment contracts. Perform background checks for critical roles. Establish a formal offboarding checklist including IT access revocation. Train HR on security incident reporting.