Do you perform background screenings for applicants, including criminal, credit, professional/academic, references and drug screening? Are they applicable to all employees, contractors, vendors, and others who may have access to your systems, applications, and devices? Are there any exceptions?
Do you perform background screenings for applicants, including criminal, credit, professional/academic, references and drug screening? Are they applicable to all employees, contractors, vendors, and others who may have access to your systems, applications, and devices? Are there any exceptions?
Does the organization require background verification and criminal history checks for all candidates for employment, contractors and third party vendors?
Does the organization require background verification and criminal history checks for all candidates for employment, contractors and third party vendors?
Is there a structured process with defined responsibilities for removal of access rights & revoking of assets when person leaves the customer scope of work?
Is there a structured process with defined responsibilities for removal of access rights & revoking of assets when person leaves the customer scope of work?
Are all employees, contractors and agency staff subject to background checks prior to employment?
Are all employees, contractors and agency staff subject to background checks prior to employment?
Are employees mandated to sign a non-disclosure or confidentiality agreement/NDA/Code of conduct?
Are employees mandated to sign a non-disclosure or confidentiality agreement/NDA/Code of conduct?
Do you have an information security awareness program mandatory for all staff (employees and contractors)? Are all staff required to take the information security awareness trainings and sessions?
Do you have an information security awareness program mandatory for all staff (employees and contractors)? Are all staff required to take the information security awareness trainings and sessions?
Has disciplinary process been defined as part of Security policy or HR policy for employees who have committed a security breach? Are the employees aware of the fact that in case they breach security there could be a disciplinary action taken against them?
Has disciplinary process been defined as part of Security policy or HR policy for employees who have committed a security breach? Are the employees aware of the fact that in case they breach security there could be a disciplinary action taken against them?
Is there a formal user registration and de-registration process implemented to enable assignment of access rights?
Is there a formal user registration and de-registration process implemented to enable assignment of access rights?
Are efforts being made to decrease spread of respiratory infections by improving hygiene practices at work and educating employees on the importance controlling infections at work by adopting correct hygiene practices
Are efforts being made to decrease spread of respiratory infections by improving hygiene practices at work and educating employees on the importance controlling infections at work by adopting correct hygiene practices
Is the Organisation restricting travel into affected geographic areas. Issue guidance for employees working in or near an affected area when an outbreak begins. Also issue guidance for employees returning from affected areas.
Is the Organisation restricting travel into affected geographic areas. Issue guidance for employees working in or near an affected area when an outbreak begins. Also issue guidance for employees returning from affected areas.
Is the Organisation providing sufficient and accessible infection control supplies, such as alcohol-based hand gel, tissues and disposable masks if recommended, as well as instructional signs that display correct infection control procedures.
Is the Organisation providing sufficient and accessible infection control supplies, such as alcohol-based hand gel, tissues and disposable masks if recommended, as well as instructional signs that display correct infection control procedures.
Does the organisation ensure that building maintenance and cleaning services incorporate recommended infection control procedures.
Does the organisation ensure that building maintenance and cleaning services incorporate recommended infection control procedures.
What hiring criteria used for employing or contracting Supplier personnel (background check)?
What hiring criteria used for employing or contracting Supplier personnel (background check)?
Provide an overview of your on-boarding and off-boarding process, describing the NDA your employees are required to sign upon employment, the agreed delay to disable an account upon contract termination, etc...
Provide an overview of your on-boarding and off-boarding process, describing the NDA your employees are required to sign upon employment, the agreed delay to disable an account upon contract termination, etc...
Confirm if there is any background verification of your employment candidates
Confirm if there is any background verification of your employment candidates
Does the background check for all the employees accessing and handling the organisation's information?
Does the background check for all the employees accessing and handling the organisation's information?
Does the process of employyes background verification check in place?
Does the process of employyes background verification check in place?
What kind of cloud security awareness you provide to your administrators?
What kind of cloud security awareness you provide to your administrators?
Are your admins are cloud certified?
Are your admins are cloud certified?
Except information security governance being in place, the Vendor has competent and security aware people as a part of the information security program used in protecting the service.
Except information security governance being in place, the Vendor has competent and security aware people as a part of the information security program used in protecting the service.
Are all employment candidates, contractors and involved third parties subject to background verification (as allowed by local laws, regulations, ethics and contractual constraints)?
Are all employment candidates, contractors and involved third parties subject to background verification (as allowed by local laws, regulations, ethics and contractual constraints)?
Are all personnel required to sign Confidentiality Agreements to protect customer information, as a condition of employment?
Are all personnel required to sign Confidentiality Agreements to protect customer information, as a condition of employment?
Supplier Security Relationship β Indicate for processors requiring access to data, the security controls and arrangements carried out as regards such access
Supplier Security Relationship β Indicate for processors requiring access to data, the security controls and arrangements carried out as regards such access
Service provider shall perform criminal record check, security clearance and other background screening for all his staff who may handle or come in contact with the customer data or systems. Only staffs that pass these checks should be allowed to interact with the customer data or systems
Service provider shall perform criminal record check, security clearance and other background screening for all his staff who may handle or come in contact with the customer data or systems. Only staffs that pass these checks should be allowed to interact with the customer data or systems
Does your organization perform background checks to examine and assess an employee's or contractor's work and criminal history? Are particular sensitive positions subject to periodic follow-up background checks? i.e. Credential verification, criminal history, credit history and references
Does your organization perform background checks to examine and assess an employee's or contractor's work and criminal history? Are particular sensitive positions subject to periodic follow-up background checks? i.e. Credential verification, criminal history, credit history and references
Do you have formal staff vetting policy?
Do you have formal staff vetting policy?
Have all staff undergone State and/or National Police Checks?
Have all staff undergone State and/or National Police Checks?
Has management actively informed employees of their responsibility, to report incidents or suspected incidents involving Personal Data?
Has management actively informed employees of their responsibility, to report incidents or suspected incidents involving Personal Data?
