Entity requires that all critical servers are protected by malware-protection software
Entity ensures that new hires have been duly evaluated for competence in their expected job responsibilities
Entity appoints a Compliance Program Manager who is delegated the responsibility of planning and implementing the internal control environment
Entity appoints a People Operations Officer to develop and drive forward all HR security-related strategies across the company
Entity has a documented HR Security Policy, and makes it available for all staff on the company employee portal
Entity’s infrastructure is configured to generate audit events for actions of interest related to security for all critical systems