II.C.7(a)     Security Screening in Hiring Practices

Management should have a process to verify job application information for all new employees. The sensitivity of a particular job or access level may warrant additional screening and recurring background and credit checks. Management should verify that contractors are subject to similar screening procedures. In addition to initial screening, management should remain alert to changes in personal circumstances of employees and contractors that could increase incentives for system misuse or fraud.


Previous Section
II.C.7 User Security Controls
Next Section
II.C.7(b) User Access Program