[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-6-1":3},{"item":4,"lessons":16,"controls":30,"related":44},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-6-1","Annex A 6.1","Screening",3,"International Organization for Standardization (ISO) and IEC","**What it asks for.** Background checks on candidates should be carried out before they join and, where appropriate, during employment. Checks must respect applicable laws, regulations and ethics, and be proportionate to the business requirements, the classification of information accessed and the perceived risks.\n\n**In practice.** The organisation defines screening levels by role, so that people with privileged access or access to sensitive data receive deeper checks. Typical checks include identity, right to work, references, qualifications and, where lawful, criminal record checks. In European countries the legal limits on screening vary considerably, so HR and legal agree what is permitted in each jurisdiction. Evidence includes a screening policy, role based criteria and records showing checks were completed before access was granted.\n\n**Common gaps.** Contractors and staff provided by suppliers are often not screened to the same standard, with no contractual requirement on the supplier to do so. Re-screening when someone moves into a more sensitive role is rarely done.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26],{"slug":19,"title":20,"published_at":21},"ransomware-groups-escalate-to-physical-threats-against-employees-and-families","Ransomware Groups Escalate to Physical Threats Against Employees and Families","2026-10-14T06:20:17.072+00:00",{"slug":23,"title":24,"published_at":25},"convicted-hackers-cybersecurity-role-highlights-insider-threat-risks","Convicted Hacker's Cybersecurity Role Highlights Insider Threat Risks","2026-09-28T18:21:56.222+00:00",{"slug":27,"title":28,"published_at":29},"ptsb-fined-277500-after-social-engineering-attacks-bypass-contact-centre-authentication","PTSB Fined €277,500 After Social Engineering Attacks Bypass Contact Centre Authentication","2026-07-06T14:20:24.268+00:00",[31,36,40],{"slug":32,"name":33,"problem":34,"stories":35},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",1,{"slug":37,"name":38,"problem":39,"stories":35},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":41,"name":42,"problem":43,"stories":35},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[45,49,54,59,64,69,73,77],{"family":46,"item":47,"code":48,"title":48,"together":9},"itil","overview","ITIL",{"family":50,"item":51,"code":52,"title":53,"together":9},"gdpr","32","Article 32","Security of processing",{"family":55,"item":56,"code":57,"title":58,"together":9},"nist-800-53","ir-6","IR-6","Incident Reporting",{"family":60,"item":61,"code":62,"title":63,"together":9},"cis","14","Control 14","Security Awareness and Skills Training",{"family":60,"item":65,"code":66,"title":67,"together":68},"17","Control 17","Incident Response Management",2,{"family":60,"item":70,"code":71,"title":72,"together":68},"6","Control 6","Access Control Management",{"family":55,"item":74,"code":75,"title":76,"together":68},"at-2","AT-2","Literacy Training and Awareness",{"family":50,"item":78,"code":79,"title":80,"together":68},"33","Article 33","Notification of a personal data breach to the supervisory authority"]