tpm-06-third-partypersonnelsecurity.md

SCF - TPM-06 - Third-Party Personnel Security

Mechanisms exist to control personnel security requirements including security roles and responsibilities for third-party providers.

Mapped framework controls

ISO 27002

• A.5.19
• A.5.2
• A.8.30

SOC 2

• CC9.1

Control questions

Does the organization control personnel security requirements including security roles and responsibilities for third-party providers?