Video Description

As we discussed in the previous section, among the controls governing the cloud infrastructure there are also ones for managing the security risks associated with personnel. These are referred to as HR controls. The goal of these controls is to minimize the risk from personnel closest to data hosted in the cloud. Some of the issues and methods concerned with HR controls are:

  • Roles and responsibilities

  • Background checks

  • Employment agreements and NDAs

  • Employment termination policy and procedures

  • Separation of duties

  • Job rotation

  • Mandatory vacations

Course Modules

ISC2 Certified Cloud Security Professional (CCSP)