Measure: ProcedureForPersonnelChanges

Description

Following of a structured procedure in case of new employees entering the company or employees leaving the company. Thus new employees directly learn about all important information security issues and leaving employees are informed about their duty of confidentiality. By this measure, data losses due to leaving employees and faults due to unawareness of new employees shall be prevented.

Comments

For new employees checklists should be used to ensure that no important issues about information security are forgotten. If possible, the leaving employee should train the new employee. All access rights have to be taken from the leaving employee.

Event type

Risk reduction mechanism

Threat Types

Action characteristics

event_ measures

Events