Confidentiality Statement
I'm unclear on who should be signing the confidentiality statement. Should this be our employees, or our external clients and suppliers?
Assign topic to the user
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now 
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now
ISO 27001 RISK ASSESSMENT AND TREATMENT REPORT
Document the results of the risk management process.
Get it now
In fact, all people who need to access information that is sensitive should sign a confidentiality statement. E.g.:
- employees should sign a confidentiality statement so they can access clients’ information.
- clients should sign a confidentiality statement so they can access the organization's internal procedures.
- suppliers should sign a confidentiality statement so they can access the organization's data.
To identify which information may need a confidentiality statement so it can be accessed, you should check the results of risk assessment, and applicable legal requirements.
Comment as guest or Sign in
Jun 13, 2023