TYÖSUHTEEN AIKAISET MUUTOKSET TURVALLISUUSLUOKITELTUJEN TIETOJEN KÄSITTELYSSÄ

Our organization has defined procedures for coordinating, at the time of termination of employment, e.g..:

• Hardware recovery
• Removal of access rights
• Restoration of other information assets

When a person starts an employment relationship, he or she is granted access to all data systems related to his or her role at once.

The employment contract should distinguish between cyber security responsibilities and obligations that remain in force after the termination of the employment relationship. The employee should also be reminded of these at the end of the employment relationship to ensure compliance.

At the very least, job applicants applying for key cyber security roles should be subject to background checks, taking into account relevant laws and regulations.

The check may include:

• review of recommendations
• verification of CV accuracy
• verification of educational qualifications
• verification of identity from an independent source
• other more detailed checks (e.g. credit information, review of previous claims or criminal record)

The background check may also be extended to, for example, teleworkers, contractors or other third parties. The depth of the background check can be related to the category of the accessed data.

Organisaatio on muodostanut ohjeistukset, joilla varmistetaan turvallisuutta eri työsuhteen elinkaaren vaiheissa. Ohjeistuksia koulutetaan ja valvotaan tarvittavien henkilöstöryhmien parissa (esim. esimiehet).

Menettelyohjeet voidaan kohdistaa työsuhteen eri elinkaaren vaiheisiin. Eri ohjeistuksia voivat olla esimerkiksi:

• rekrytointiohjeet
• perehdyttämisohjeet
• työsuhteen aikaisten muutosten ohjeet
• työsuhteen päättymisen ohjeet
• ja ohjeet yksityiskohtaisempiin toimiin kuten esimerkiksi ohjeet käyttö- ja pääsyoikeuksien muutoksiin

If a person's employment is terminating or significantly changing, the reduction of access rights to assets should be considered, depending on the following:

• a person’s reluctance towards the upcoming change
• the extent of the person’s current access rights and responsibilities
• the value of the assets to which the employee has access