Versions Compared

Version Old Version 2 New Version 3
Changes made by

Roxy Sanchez

Roxy Sanchez

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
title Do employment contracts include consenting to all information security responsibilities inline with organisational policies and procedures?

Do employment contracts include consenting to all information security responsibilities inline with organisational policies and procedures?

Yes. An example employment contract is available on request from customers@commonplace.is

More information: https://commonplace.atlassian.net/l/cp/fAnKR788

Expand
title Do employees receive an information security and data protection training programme?

Do employees receive an information security and data protection training programme?

All employees receive information security and data protection training on an ongoing basis. This starts as part of their induction process with further training delivered on an ongoing basis. This includes training on GDPR.

Refresher training is delivered approximately annually (can be 13-14 month cycles).

Additional subject specific training is delivered to different employees and teams as required (eg. ownership in ISO27001 for assigned asset owners).

...