Controls

Background Checks

Background checks are performed on all new employees and contractors prior to employment, in accordance with applicable laws and regulations.

Security Role Assignment

Security roles and responsibilities are clearly defined in writing. The organization designates personnel responsible for information security oversight.

Security Awareness Training

All employees and partners complete security awareness training at least annually, covering topics such as phishing, social engineering, and data handling.

Security Policy Training

All employees, partners, and contractors receive training on the organization's security policies and procedures upon onboarding and when policies change.