A few things that you’ll want to pay attention to as a cybersecurity professional related to personnel management is before employment, during employment, and after employment.
Before employment focus on hiring procedures, background checks, and security clearances.
During employment focus on employee agreements, job descriptions, and roles and responsibilities.
After employment we focus on termination procedures.
A background check should focus on employment history, reference checks, education, certifications, credit check, criminal records, citizenship, membership to union and associations, driving record, and drug testing.
To focus on employee agreements is to think about using non-disclosure and non-compete agreements as well as acceptable use policies.
It is important to capture the job description as well. Lay out what is expected of the employee.
When terminating an employee ensure removal of system credentials and access, returning company assets, signing of the non-disclosure agreement, and an exit interview. Have a good process to maintain good security.
Cybersecurity Fundamentals 