19 docs tagged with "onboarding"

Practical cases of applying security governance in projects, exceptions and contracting

Binary, traceable verification checklist of the adoption of the practices of Chapter 13.

Checklist and structured validation model for the screening, approval and onboarding of contractors

Practical integration of upskilling and onboarding practices into the development lifecycle

What SbD-ToE requires to exist on the HR / People Operations side

Technical and process indicators for the assessment of the effectiveness, coverage and impact of the security training and onboarding programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Standardised procedure for the secure onboarding of third parties, with the minimum required training.

get_guide_by_role to generate personalised onboarding guides — practices by SDLC phase + user stories joined.

Example of a technical quiz used for knowledge validation in the onboarding process.

Setup and use of an isolated environment for the practical training of contractors before access to real systems

Organisational policy that defines the security requirements applicable to the contractual lifecycle with suppliers and contractors, including pre-contractual due diligence, minimum contractual clauses by risk level, technical onboarding, compliance monitoring, periodic reassessment and secure offboarding, proportional to the criticality level (L1, L2, L3).

Organisational policy that defines the requirements for the security training and upskilling programme, including mandatory onboarding, training tracks by profile and risk level, the Security Champions programme, practical exercises, content updates, effectiveness KPIs and integration with individual performance objectives, proportionate to the criticality level (L1, L2, L3).

Operational and institutional metrics that make it possible to assess the effectiveness of training and onboarding.

Formal verification checklist for secure technical onboarding, with a record and validation per role.

Canonical catalogue of security training and onboarding requirements (TRN-001 to TRN-009), with applicability by risk level and acceptance criteria for training tracks, verifiable onboarding, Security Champions and training effectiveness.

Strategies and practices to ensure that teams, profiles and stakeholders are prepared to apply Security by Design

List of minimum training content by technical profile for onboarding and continuous upskilling.

Training path adapted to the risk level (L1–L3) and to the technical profile of each member of staff.

Minimum questionnaire to validate the knowledge of external staff with technical permissions