3.1.7 Personnel management

Information security is more a people issue than a technical issue. Personnel are a vital link in the protection of information resources, as information is gathered by people, entered into information resource systems by people, and ultimately used by people. Security issues should be addressed with regard to:

• People who use computer systems and store information in the course of their normal job responsibilities.
• People who design, program, test, and implement critical or sensitive systems.
• People who operate computer facilities that process critical or sensitive data.