[Checklist] Personnel Controls to Prevent Data Leakage

Insider activity is one of the leading causes of data-leak incidents - through privilege abuse, unauthorized copying, or employees taking data with them when they leave. This checklist helps organizations identify weaknesses in HR-related data governance, assess the current state, and put in place controls that prevent leaks from inside the organization. It's particularly relevant for businesses that collect, store, and process customer data - especially in finance, technology, real estate, and e-commerce - for HR, IT, and InfoSec teams that need to jointly build internal-control policies, and for organizations preparing to comply with Vietnam's Decree 13/2023/NĐ-CP on personal-data protection.