graphgrc

SCF - HRS-04.2 - Formal Indoctrination

Mechanisms exist to verify that individuals accessing a system processing, storing, or transmitting sensitive information are formally indoctrinated for all the relevant types of information to which they have access on the system.

Mapped framework controls

ISO 27001

• 7.3.a
• 7.3.b
• 7.3.c
• 7.3

ISO 27002

• A.5.4

SOC 2

• CC1.4

Control questions

Does the organization verify that individuals accessing a system processing, storing, or transmitting sensitive information are formally indoctrinated for all the relevant types of information to which they have access on the system?

This site is open source. Improve this page.