Developing Cybersecurity Programs and Policies, 3rd Edition

Chapter 6

Human Resources Security

Chapter Objectives

After reading this chapter and completing the exercises, you will be able to do the following:

• Define the relationship between cybersecurity and personnel practices.

• Recognize the stages of the employee life cycle.

• Describe the purpose of confidentiality and acceptable use agreements.

• Understand appropriate security education, training, and awareness programs.

• Create personnel-related security policies and procedures.

Is it possible that people are simultaneously an organization’s most valuable asset and their most dangerous threat? Study after study cites people as the weakest link in cybersecurity. Because cybersecurity is primarily a people-driven process, it is imperative that the ...