Questions to ask your CHRO
- Are you aware of the types of PII and taxation and financial information that the HR department holds?
- What HR tool do we use that safeguards our data’s privacy and security?
- How do we manage our sourcing, hiring, and onboarding process in regard to privacy and security? Do our employment contracts include security and privacy clauses?
- How does the HR department ensure employees are aware of information security policies and that they comply with them?
- What activities does the HR department undertake to ensure their HR team is aware of legal requirements, such as the Australian Privacy Principles or General Data Protection Regulation (GDPR)?
- What activities does the HR department undertake to protect employees from cyberthreats, including cyber-awareness training?
- How do current HR processes ensure insider threats are taken care of if a disgruntled employee is leaving the organization?
A sizable number of cyberattacks...