Recruitment and screening
We ensure all staff have the appropriate skills and experience for the role and a job description to support that. Ongoing training and mentoring are in place to provide additional support and skills. Access to assets during onboarding is pre-determined by role in line with our control requirements on a least privilege basis and access is only provided once screening has been completed and initial training concluded.
The following screening checks are undertaken for new staff and contractors who will have access to customer information:
- Basic DBS
- Right to work
- Employment history
Contracts and terms of employment
Contracts are signed by all staff and contractors; those contractual agreements include confidentiality and non-disclosure requirements to comply with all information security policies and associated requirements. The contract specifically refers to our disciplinary procedures that may be invoked in the event of a breach or non-conformance (depending on severity, intention and other circumstances) and could result in termination of employment.
Training and awareness
All staff must read and confirm their acceptance of various policies and management systems within their first week – a record of which is maintained by our human resources system (HR system).
Our training programme is supported by further information included in employee inductions and additional awareness campaigns throughout the year.
Leavers and movers
Employee onboarding, offboarding and transferees process is managed through our HR system via structured tasks.
Where available, Single-Sign-On (SSO) is applied and user accounts are restricted as part of our offboarding process.
Tasks with email notifications are sent to designated administrators following any creation or change to the employee record.
Both onboarding and offboarding include a checklist that must be completed; this covers retrieval of assets, removal of access rights, termination of access for offices, removal from systems, changes of password etc.
If an employee transfers to another team, existing access is reviewed and amended as appropriate.
It is the manager’s responsibility to ensure all assets are retrieved from a summary provided by our human resources team.
Need further support?
If you still require assistance with us or have any further questions, please raise a ticket with our support team.
Alternatively, please see our frequently updated knowledge base articles for reference.