HR Security Protocols

HR SECURITY PROTOCOLS

Employer Name:   Policy Effective Date:

Personal Information

Position Information

Reporting Manager:   Start Date:

Employment History (Most Recent 2)

Education

References (3 Professional)

Security Protocols — Definitions & Scope

This document sets mandatory information security practices, controls and employee responsibilities for access to employer systems, data, facilities, and third‑party services. It applies to all employees, contractors, interns, and temporary staff who are granted access to employer resources.

Access Control and Privileged Accounts

Access is granted on a least‑privilege, role‑based basis. Employees must request elevated privileges in writing; approval requires manager and security officer consent. Shared accounts are prohibited except where written exception is granted.

Credentials, Passwords, and Authentication

Passwords must meet complexity requirements, be changed regularly, and never shared. Multi‑factor authentication is required for all privileged access and remote access to internal systems.

I acknowledge and agree to follow the employer's credential and authentication requirements:   I acknowledge the credential policy

Device and Network Security

Company devices must run approved configurations and endpoint protection. Personal devices used to access company resources must be registered, meet baseline security, and be approved by IT. Use of public or unsecured networks requires company‑approved VPN.

Company device assignment:

Personal device approval status: Approved for work access

Data Classification and Handling

All information handled must be protected according to classification: Public, Internal, Confidential, or Restricted. Confidential and Restricted data require encryption at rest and in transit, and minimum access controls.

Incident Reporting and Response

All suspected security incidents, data breaches, lost/stolen devices, or unauthorized disclosures must be reported immediately to the security operations center and the employee's manager. Failure to report may result in disciplinary action.

Background Checks & Screening

Employment is subject to screening, including criminal background, identity verification, and employment verification where permitted by law. Continued access to certain systems may require periodic re‑screening.

I authorize the employer to conduct background checks and verifications as required for my role:   I consent to background checks

Training, Monitoring and Acknowledgement

Employees must complete mandatory security awareness training within 30 days of hire and annually thereafter. Employer may monitor system activity to ensure compliance with policy and applicable law.

Training completion date:    I acknowledge monitoring: I acknowledge employer monitoring

Remote Work and Offboarding

Remote access requires company‑approved VPN and devices. On termination or role change, employees must return company property and will have access revoked immediately. Offboarding will follow the employer's checklist to remove logical and physical access.

Enforcement, Exceptions, and Audit

Violations of security protocols may result in disciplinary action up to and including termination. Exceptions must be documented, approved in writing by the security officer, and are subject to periodic review. The employer retains the right to audit compliance and review system logs.

Legal Disclosures

At‑Will Employment Statement: Employment remains at‑will where applicable; nothing in this document creates a contract of employment for any specific duration.

Equal Opportunity Statement: The employer provides equal employment opportunity and prohibits discrimination or harassment.

Employee Certification and Authorization

I certify that all information provided on this form is true and complete to the best of my knowledge. I understand and agree to comply with the policies and procedures articulated above. I understand that violations may result in disciplinary action, up to and including termination.

I expressly authorize the employer to contact former employers and references provided for the purpose of verifying information relevant to my employment and continued access to systems:   I authorize contacting references and prior employers

Sign Now