Update security-policies.md (#19504)

This commit is contained in:
Nathanael Holliday 2024-06-11 16:37:40 -05:00 committed by GitHub
parent 4197076b16
commit bdeed6c42b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -378,7 +378,7 @@ Fleet policy requires all workforce members to comply with the HR Security Polic
Fleet policy requires that:
- Background verification checks on candidates for employees and contractors with production access to the Fleet infrastructure resources must be carried out in accordance with relevant laws, regulations, and ethics. These checks should be proportional to the business requirements, the classification of the information to be accessed, and the perceived risk.
- Background verification checks on candidates for all employees and contractors must be carried out in accordance with relevant laws, regulations, and ethics. These checks should be proportional to the business requirements, the classification of the information to be accessed, and the perceived risk.
- Employees, contractors, and third-party users must agree to and sign the terms and conditions of their employment contract and comply with acceptable use.
- Employees will perform an onboarding process that familiarizes them with the environments, systems, security requirements, and procedures that Fleet already has in place. Employees will also have ongoing security awareness training that is audited.
- Employee offboarding will include reiterating any duties and responsibilities still valid after terminations, verifying that access to any Fleet systems has been removed, and ensuring that all company-owned assets are returned.