[Learn CISSP the Hard Way] 2 – Personnel Security and Risk Management Concepts

Key abbr. for review:

Service Level Agreement (SLA), PII,

A. Contribute to Personnel Security Policies

Job description is important. Concepts behind: Separation of Duties; Job Responsibilities; Job Rotation (knowledge redundancy, reduce risk of fraud); Employment Candidate Screening; Employment Agreements and Policies; Employment Termination Process; Vendor, Consultant, and Contractor Controls Service Level Agreement: often cover: system uptime, maximum consecutive downtime, peak load, average load, responsibility for diagnostics, failover time (if redundancy is in place). Financial remedies if the agreement is not maintained. …Compliance; Privacy; Personal identifiable information (PII)