1.3 KiB
1.3 KiB
id, category, revision-version, revision-date, estimate-time, necessity, frameworks
| id | category | revision-version | revision-date | estimate-time | necessity | frameworks | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| PER.LIF.001 | personnel/lifecycle | 1 | 2024-01-10 | 30m | mandatory |
|
Integrate security checklist in your onboarding process
Purpose
It is the perfect timing to ensure that every employees has:
- accepted and signed all documents
- the access needed to perform his/her tasks
- started his/her security training
Implementation
In theory, you already have an onboarding plan for your new employees (if not, Onboarding for new joiner) and a to-do for your admin running the onboarding (if not, Onboarding admin checklist).
On your employee to-do, be sure to include:
- Set-up of 2FA
- Set-up of password manager
- Read & acknowledge all policies (it can be part of the contract)
- Complete the security training
On your admin to-do, be sure to include:
- contract is signed before granting access
- apply “least privilege principle” for access (the matrix you defined)
- Force the set-up of 2FA and password manager
- Initiate the security training
Evidence
- Screenshots of a completed onboarding checklists.
- Screenshots of a completed admin checklist for new joiner.