People Controls

• Screening
• Terms and conditions of employment
• Information security awareness, education and training
• Disciplinary process
• Responsibilities after termination or change of employment
• Confidentiality or non-disclosure agreements
• Remote working
• Information security event reporting