Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Maintaining confidentiality agreements

Critical
High
Normal
Low

All employees handling confidential information should sign a confidentiality or non-disclosure agreement before processing confidential information.

The agreement should include e.g.:

  • clear definition of confidential information
  • the expected duration of the commitment
  • the measures required when the agreement is terminated
  • the responsibilities and measures of the parties to prevent unauthorized disclosure of information
  • ownership of information, trade secrets and intangible assets and how this relates to the protection of confidential information
  • the permitted use of confidential information and the parties rights to use the information
  • the right to inspect and supervise activities involving confidential information
Connected other frameworks and requirements:
T10: Salassapito- ja vaitiolositoumukset
7.1.2: Terms and conditions of employment
7.3: Termination and change of employment
ISO 27001
7.3.1: Termination or change of employment responsibilities
ISO 27001
13.2.4: Confidentiality or non-disclosure agreements
ISO 27001
No items found.