TISAX - Trusted Information Security Assessment Exchange
Information Security Management

TISAX - Trusted Information Security Assessment Exchange TISAX-ISM-03: Human Resources Security

Implement security measures for the employment lifecycle including screening, security awareness training, and responsibilities upon termination or change of employment.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 19 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

  • ASD37-37 Personnel management (Very Good)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

  • AWWA-1.3 Security Awareness and Training

FBI CJIS Security Policy · 1 control

  • CJIS-2 Security Awareness Training

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

  • CAT-D1-4 Training and culture

ISO 27799:2025 · 1 control

  • ISO27799-09 Security awareness and training program

ISO 28001:2007 Supply Chain Security Management · 1 control

  • ISO28001-PI-02 Security Awareness and Training

ISO/IEC 27011:2024 · 1 control

  • 27011-6.3 Awareness and Training

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

Secure by Design: A Guide for Manufacturers (CISA) · 1 control

  • SBD-DEV-04 Phishing-Resistant Authentication

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

  • GT-4 Social Engineering Attacks

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Information Security Management

Query this from an agent

The graph holds this control, the 19 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll TISAX - Trusted Information Security Assessment Exchange controls