Terms and conditions of employment

The employment contracts specify the responsibilities of the employee and the organization for cyber security.

Contracts should include e.g.:

• the employee's legal responsibilities and rights, such as those related to copyright or data protection law
• the employee's responsibility for following the instructions, e.g. related to the use of hardware and data and the classification of information
• the employee's or temporary employee's responsibility for processing information received from other companies or other parties
• measures if the employee or temporary worker violates the safety requirements of the organization
• continuing obligations after termination of employment

All employees handling confidential information should sign a confidentiality or non-disclosure agreement before processing confidential information.

The agreement should include e.g.:

• clear definition of confidential information
• the expected duration of the commitment
• the measures required when the agreement is terminated
• the responsibilities and measures of the parties to prevent unauthorized disclosure of information
• ownership of information, trade secrets and intangible assets and how this relates to the protection of confidential information
• the permitted use of confidential information and the parties rights to use the information
• the right to inspect and supervise activities involving confidential information

Confidentiality and non-disclosure requirements are reviewed at regular intervals and whenever changes affecting these requirements occur.