A.6 People controls

A.6 People controls defines the security measures that must be applied to personnel involved in an information security management system. It includes requirements for roles and responsibilities, background checks, security awareness training, handling of confidential information, and procedures for managing employee termination or role changes.