The collective set of people-related security controls within an ISMS, covering the full employee lifecycle: background checks before hiring, security training and disciplinary procedures during employment, and continuing information-security obligations after leaving. It also requires that employees of outsourcing partners comply with the organization's own policies and procedures. The goal is to protect information assets from insider threats as well as external ones.

Past questions testing this term · 1 questions

• 2020r02o #84ISMS の情報セキュリティリスク対応における，人的資源に関するセキュリティ管理策の記述として，適切でないものはどれか。