People controls

search account_circle

verifiedISO 27001

People controls

8 controls in this part of theISO/IEC 27001:2022. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Personnel Background Verification

Conduct background checks on all job candidates before hiring to manage risks.

Terms and conditions of employment for security

Ensure job agreements state everyone's info security duties clearly.

Information security awareness, education and training program

Ensure everyone gets regular training and updates on information security relevant to their job.

Disciplinary Process for Information Security Violations

Ensure staff understand consequences for breaking security rules to prevent violations.

Responsibilities after employment termination or role change

Ensure security responsibilities are clear when employment ends or roles change.

Confidentiality and Non-disclosure Agreements

Ensure all relevant parties sign agreements to protect confidential information.

Remote Working Security Measures

Implement security measures to protect company info when working outside the office.

Mechanisms for Reporting Security Events

Ensure staff can quickly report security problems through official channels to prevent bigger issues

Back to the full ISO 27001 Annex A control list, or browse the complete control library.