ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
A security manager is designing a new onboarding process for all employees, including contractors and temporary staff. A key requirement is to ensure that all new personnel understand their security responsibilities, acceptable use policies, and the proper handling of sensitive information from day one. Which security operations activity is fundamental to achieving this goal?
- APhysical security
- BThird-party risk management
- CPersonnel security
- DAsset management
Show answer & explanationAnswer & explanation
Correct answer: C. Personnel security
Personnel security encompasses all aspects of managing human resources to minimize security risks, including background checks, security awareness training, and defining roles and responsibilities for all staff.
Why the other options are wrong
- A. Physical security protects tangible assets and facilities, not directly employee responsibilities or policies.
- B. Third-party risk management focuses on external vendors and partners, not internal employees and contractors.
- D. Asset management tracks physical and logical assets, not employee security responsibilities.
Personnel Security
Measures taken to ensure that individuals who have access to an organization's assets are trustworthy and understand their security responsibilities.
- Covers hiring, onboarding, and termination.
- Includes background checks and security awareness.
- Crucial for insider threat prevention.
Memory trick: People are the strongest (or weakest) link.