Content library
Julkri: TL IV-I
HAL-11: Salassapito- ja vaitiolovelvollisuus

How to fill the requirement

Julkri: TL IV-I

HAL-11: Salassapito- ja vaitiolovelvollisuus

Task name
Priority
Status
Theme
Policy
Other requirements
Maintaining confidentiality agreements
Critical
High
Normal
Low
Fully done
Mostly done
Partly done
Not done
Personnel security
Cyber security in contracts
requirements

Task is fulfilling also these other security requirements

T10: Salassapito- ja vaitiolositoumukset
Katakri
7.1.2: Terms and conditions of employment
ISO27 Full
7.3: Termination and change of employment
ISO27 Full
7.3.1: Termination or change of employment responsibilities
ISO27 Full
13.2.4: Confidentiality or non-disclosure agreements
ISO27 Full
1. Task description

All employees handling confidential information should sign a confidentiality or non-disclosure agreement before processing confidential information.

The confidentiality commitment should include, among other things:

  • a clear definition of confidential information
  • the expected duration of the commitment
  • required actions when the commitment is terminated
  • the responsibilities and actions of signatories to prevent unauthorized disclosure of information
  • ownership of information, trade secrets, and intellectual property and how this relates to the protection of confidential information
  • permissible use of confidential information and the signatory's rights to use the information
  • the right to audit and monitor activities involving confidential information

The requirements and needs for confidentiality agreements are reviewed and updated at regular intervals.

Early orientation of security guidelines for personnel
Critical
High
Normal
Low
Fully done
Mostly done
Partly done
Not done
Personnel security
Security guidelines
requirements

Task is fulfilling also these other security requirements

HAL-11: Salassapito- ja vaitiolovelvollisuus
Julkri
HAL-14: Käyttö- ja käsittelyoikeudet
Julkri
1. Task description

Tietoa käsitteleville henkilöille selvitetään tietojen suojaamista ja asiakirjojen käsittelyä koskevat tietoturvaohjeet ja -periaatteet ennen pääsyä tietoihin tai organisaation tarkasti määrittelemien aikamääreiden sisällä.

No items found.