Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) Cybersecurity in Human Resources
Manages personnel-related cybersecurity risks and requirements before, during, and after employment per entity policies and related laws and regulations.
-
1-4-P-1
In addition to Subcontrols in the ECC controls 1-9-3 and 1-9-4, the following requirements should be covered prior and during the professional relationship of personnel with the CSP as a minimum:
-
1-4-P-2
In addition to Subcontrols in the ECC control 1-9-5, the following requirements should be in place, as a minimum, for the termination/completion of a human resource's professional relationship with the CSP:
Need help putting this into practice? See our NCA CCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo