Departmental Dimension
Human Resource Behavior (HRB)
The HRB dimension outlines secure practices for the entire employee lifecycle, from candidate data protection to the systematic revocation of access during offboarding.
HRB1Recruitment
HRB1.1Secure candidate data collection
- ✓HRB1.1.1Collects only absolutely necessary information required for the selection process
HRB1.2Candidate data protection
- ✓HRB1.2.1Stores candidate data securely through the lawful retention period
- ✓HRB1.2.2Limits candidate data access to authorized personnel only
- ✓HRB1.2.3Transmits recruitment data as password-protected documents
- ✓HRB1.2.4Use strict access controls and encryption
HRB1.3Candidate data archiving and retention
- ✓HRB1.3.1Classifies candidate data based on organizational guidelines
- ✓HRB1.3.2Explains data retention and obtains consent from the departing employee Classifies candidate data based on organizational guidelines
- ✓HRB1.3.3Adheres to privacy laws for data retention, storage, or deletion
HRB1.4Secure candidate data deletion
- ✓HRB1.4.1Uses secure data deletion methods to permanently erase candidate data
- ✓HRB1.4.2Ensures candidate data removal to prevent unintended restoration or duplication
HRB2Secure Employee Onboarding
HRB2.1Ensure secure onboarding
- ✓HRB2.1.1Ensure the signing of confidentiality agreements
- ✓HRB2.1.2Conduct background verification
HRB3Employee Data Management
HRB3.1Mandatory record protection
- ✓HRB3.1.1Secures employee data backups on cloud platforms and regularly tests restoration
HRB3.2Maintaining employee performance and official records
- ✓HRB3.2.1Standardizes record-keeping practices across the organization
- ✓HRB3.2.2Verifies up-to-date and lawful employee record maintenance
HRB3.3Facilitate employee training programs
- ✓HRB3.3.1Ensures that all employees have attended mandatory cybersecurity training
- ✓HRB3.3.2Sends reminders to employees to complete mandatory cybersecurity trainings on time
- ✓HRB3.3.3Initiate disciplinary actions for cybersecurity violation
HRB4Secure Employee Offboarding
HRB4.1Ensure secure offboarding
- ✓HRB4.1.1Promptly revokes access for an employee upon their exit
- ✓HRB4.1.2Retreives company issued devices, access cards etc from the departing employee
- ✓HRB4.1.3Reminds exiting employees of sticking to their confidentiality and non-disclosure obligations
- ✓HRB4.1.4Conveys key details on departure, access termination, and data-handling instructions for knowledge transfer (Exit interview)