The personnel’s contractual obligations should include the legal aspects of confidentiality agreements or NDAs. This includes but is not limited to considerations around copyright laws, data protection laws, classifying information, handling information from stakeholders, and the consequences of not adhering to the organization’s security requirements.
Conformance1
Tools for conforming to standards, goals and processes
