preview

New-Hire Onboarding and Information Security Essay

Good Essays

New employees, full-time or non-employee contractors, present a number of risks in regards to information security. These risks can be mitigated with well-designed and thorough interview and onboarding processes. An organization’s human resources department must have guidelines in place for interviewers and hiring managers to follow to allow for high-risk potential candidates to be filtered out prior to hiring. The importance of information security as part of the hiring process is so important; the PCI Security Council has implemented a section in hits reference guide to maintain PCI compliance. PCI-DSS Section 12.7 states, “Screen employees prior to hire to minimize the risk of attacks from internal sources” (PCI Quick Reference Guide, …show more content…

Employees and non-employee contract workers must all be vetted to ensure they do not pose threats to the organization’s physical and information assets. It is up to the organization to determine what levels of access or levels of restriction should be in place on employees and contractors post-hire. These levels should be identified prior to the hiring process to drive how thorough the candidate screening should be. The amount of background checks and reference checks for a waiter at a restaurant may not be as thorough as those of a candidate for a network engineering role in the restaurant’s corporate headquarters IT department. Once a position’s scope of work and access has been determined, the job must be posted to receive responses from interested candidates. It is important for the posting to “avoid revealing access privileges to prospective employees when it advertises open positions” (Whitman & Mattord, 2011, p494). The job description must contain specifics about the job and its duties while not divulging too much detail that may open a part of the organization to risk by providing sensitive details. Interviews are used as a tool to identify a candidate to hire, usually based on a field of potential candidates’ resumes. The interview is a good resource for the hiring manager and human resources to talk with candidates one-on-one to verify if the candidate actually matches some of the

Get Access