CHAPTER 6: PEOPLE CONTROLS (ISO/IEC 27001, A.6)
6.1 Screening (ISO/IEC 27001, A.6.1)
“Background verification checks on all candidates to become personnel shall be carried out prior to joining the organization and on an ongoing basis taking into consideration applicable laws, regulations and ethics and be proportional to the business requirements, the classification of the information to be accessed and the perceived risks.”
Implementation guidance
Screening is an essential control that can prevent the organisation employing the wrong person. Identification checks, CV reviews, checks of qualifications and verification of character references are possible elements within the screening process, but legal constraints may specify the type and depth ...
Get ISO 27001 Controls - A guide to implementing and auditing, Second edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
