Position of Trust - Local Policy Covering Employee Personal Standards of Conduct and Responsibilities

From Traditional Security

Part of Position of Trust - Local Policy Covering Employee Personal Standards of Conduct Responsibilities

Associated with IA controls: PRRB-1

SV-42677r2_rule Position of Trust - Local Policy Covering Employee Personal Standards of Conduct and Responsibilities

Vulnerability discussion

Failure to inform personnel of the expected standards of conduct while holding a position of trustcan result in conduct by the individual that will require them being removed from that position and/or result in an untrustworthy person continuing in a postion of trust without proper vetting of new derogatory information.

Check content

Checks: Check to ensure that a local policy exists and is readily available to employees that informs them about pertinent security regulations and standards of conduct required of persons holding positions of trust, including (and especially) the requirement to report derogatory information to their local security manager. SOPs should be readily available to all employees in a common reading library or more efficiently, accessable on line in a common file or organization intranet. TACTICAL ENVIRONMENT: The check is applicable for fixed (established) tactical processing environments where procedural documents (SOPs) should be in place. Not applicable to a field/mobile environment.

Fix text

Fix: Ensure that a local policy exists and is readily available to employees that informs them about pertinent security regulations and standards of conduct required of persons holding positions of trust, including (and especially) the requirement to report derogatory information to their local security manager. SOPs should be readily available to all employees in a common reading library or more efficiently, accessable on line in a common file or organization intranet.

Pro Tips

Powered by sagemincer