A.6.2 — Terms and conditions of employment

low onboardingpolicy-governance

Requirement

Employment contractual agreements shall state the personnel's and the organisation's responsibilities for information security.

What the engine looks for

Every group below must be satisfied — by an affirmative statement, not a plan, a hedge or a denial — for the control to count as covered. A term ending in … matches any word it begins. Supporting terms do not change the verdict — they raise confidence and distinguish a policy that names a mechanism from one that gestures at a category.

Required element 1 — any one of

employment contractterms and conditionsemployment agreement

Required element 2 — any one of

confidentialitysecurity responsibilit…nda

Supporting terms — specificity signals

post-employmentreturn of assetssigned

Equivalent controls elsewhere

Matched on shared topics. Satisfying this control usually moves these too.

Framework	Control	Title	Shared topics
GDPR	Art.5(2)	Accountability	policy-governance
GDPR	Art.24	Responsibility of the controller	policy-governance
GDPR	Art.31	Cooperation with the supervisory authority	policy-governance
SOC 2	CC1.1	Commitment to integrity and ethical values	policy-governance
SOC 2	CC1.2	Board independence and oversight	policy-governance
SOC 2	CC1.3	Organisational structure and reporting lines	policy-governance
SOC 2	CC2.2	Internal communication of responsibilities	policy-governance
SOC 2	CC4.2	Communication of deficiencies	policy-governance