Control 6.1
Screening
Apply proportionate pre-engagement checks for roles with access to sensitive information, systems or facilities.
Read the full guide →Annex A category 6
ISO 27001 People controls
Security responsibilities and safeguards across employment and workforce activities. Use this category page to understand the control family and move into detailed implementation guides.
How this category supports the ISMS
People controls provide a structured reference for risk treatment. Applicability follows the organization’s risks, obligations, scope and chosen treatment. Record decisions in the Statement of Applicability and test selected controls in operation.
Use these guides to move from category-level planning into control-specific implementation, evidence and audit testing. The interactive lookup remains available for quick cross-control reference.
Published people control guides
Control 6.2
Terms and conditions of employment
Embed relevant security responsibilities and expectations into employment or engagement terms.
Read the full guide →Control 6.3
Information security awareness, education and training
Build role-relevant understanding and capability, then evaluate whether learning changes behaviour and performance.
Read the full guide →Control 6.4
Disciplinary process
Use a fair, communicated process for addressing deliberate or negligent breaches of security expectations.
Read the full guide →Control 6.5
Responsibilities after termination or change of employment
Manage continuing obligations, access, assets and knowledge when a person changes role or leaves.
Read the full guide →Control 6.6
Confidentiality or non-disclosure agreements
Use suitable confidentiality commitments that reflect information sensitivity, roles, jurisdictions and relationship lifecycle.
Read the full guide →Control 6.7
Remote working
Protect information and services when work occurs away from controlled organizational locations.
Read the full guide →Control 6.8
Information security event reporting
Give personnel simple, trusted routes for promptly reporting suspected events, weaknesses or unusual activity.
Read the full guide →All people controls
Browse the complete category. Each control opens a dedicated implementation guide and remains available in the free interactive lookup.
Control 6.1
Screening
Read the Control 6.1 guide →Control 6.2
Terms and conditions of employment
Read the Control 6.2 guide →Control 6.3
Information security awareness, education and training
Read the Control 6.3 guide →Control 6.4
Disciplinary process
Read the Control 6.4 guide →Control 6.5
Responsibilities after termination or change of employment
Read the Control 6.5 guide →Control 6.6
Confidentiality or non-disclosure agreements
Read the Control 6.6 guide →Control 6.7
Remote working
Read the Control 6.7 guide →Control 6.8