Organization-Human resources

Organization are the human resources, the processes and the policies and procedures that maintain the facilities and support the delivery of services.

Management of the Provider’s human resources is largely out of the control of the Customer. The Customer’s due -diligence processes should include an understanding of the Provider’s human resources and ongoing information security awareness training practices.

Cloud service provider needs to conduct regular basis for assessing the employment screening process and security awareness training program as per the ISO 27001 controls and cloud security alliance standards.