Annex A.7 -Physical Controls

Human resource security: This control requires organisations to ensure that their employees, contractors, and other third parties understand their information security responsibilities and are suitable for their roles.