From the course: CISSP Cert Prep (2021): 1 Security and Risk Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Personnel security

Personnel security

From the course: CISSP Cert Prep (2021): 1 Security and Risk Management

Start my 1-month free trial

Personnel security

- [Narrator] Personnel can often be the weakest link in the security chain. So personnel security should be an important part of the foundation of any cybersecurity program. It's very important to have strong security policies that clearly outline expectations for individual behavior, as well as the consequences for failing to comply with policy. Personnel security programs should be built upon educating employees about these policies and their role in protecting the enterprise. As you build your personnel security program, you should design explicit procedures that describe how you will handle violations of security policy. Now this is often a tricky situation that requires coordination between cybersecurity teams, managers throughout the organization, your legal team, and your human resources department. You should never approach an individual about a policy violation without first consulting with management. You might…

Contents