Category 2 - Human Resources Security

Category 2 deals with Human Resources Security, defining controls that protect the organization through the employee lifecycle. It requires background screening, confidentiality agreements, security awareness training, defined onboarding and off-boarding processes, and the management of user access rights aligned with job responsibilities.