Clear and regularly reviewed confidentiality agreements, aligning with the organization's information protection requirements, should be identified, documented, and signed by personnel and other relevant parties. This ensures the continued confidentiality of information accessed by both internal and external entities. Considerations for these agreements include e.g. defining the information to be protected, specifying the agreement duration and determining actions for non-compliance.
All employees handling confidential information should sign a confidentiality or non-disclosure agreement before processing confidential information.
The confidentiality commitment should include, among other things:
The requirements and needs for confidentiality agreements are reviewed and updated at regular intervals.
Confidentiality and non-disclosure requirements are reviewed at regular intervals and whenever changes affecting these requirements occur.