Advanced Recommendations - Training and Secure Onboarding
Recommendations for organisations with greater maturity in continuous training, automation and behavioural security.
Recommendations for organisations with greater maturity in continuous training, automation and behavioural security.
Standardised procedure for the secure onboarding of third parties, with the minimum required training.
Security contractual clauses in contracts with suppliers, contractors and technical third parties
Process for security validation of suppliers, contractors and technical third parties
Responsibilities of Suppliers and Third Parties in the SbD-ToE
Canonical catalogue of security training and onboarding requirements (TRN-001 to TRN-009), with applicability by risk level and acceptance criteria for training tracks, verifiable onboarding, Security Champions and training effectiveness.
Technical plan of the minimum mandatory upskilling for suppliers, contractors and partners with technical access.
Minimum questionnaire to validate the knowledge of external staff with technical permissions