AMC1 IS.D.OR.240(g) Personnel requirements

• ED Decision 2023/009/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

AMC1 IS.D.OR.240(g) Personnel requirements ED Decision 2023/009/R NECESSARY COMPETENCE (a)     To determine the competence needed by the personnel performing the activities, the following elements should be taken into consideration: (1)     work roles and the associated tasks; (2)     required knowledge, skills and abilities. (b)     As part of the process to ensure that personnel maintain the necessary competence, the organisation should: (1)     assess the personnel qualifications and experience with respect to the competence required for the assigned work roles to identify gaps; (2)     align the personnel qualifications and experience with the competence expected to fulfil their roles by organising adequate learning programmes for existing members of personnel, by recruiting new resources, or by a combination thereof; (3)     maintain the personnel competence during the time they are assigned to the work role. ##### AMC1 IS.D.OR.240(g) Personnel requirements *ED Decision 2023/009/R* **NECESSARY COMPETENCE** (a) To determine the competence needed by the personnel performing the activities, the following elements should be taken into consideration: (1) work roles and the associated tasks; (2) required knowledge, skills and abilities. (b) As part of the process to ensure that personnel maintain the necessary competence, the organisation should: (1) assess the personnel qualifications and experience with respect to the competence required for the assigned work roles to identify gaps; (2) align the personnel qualifications and experience with the competence expected to fulfil their roles by organising adequate learning programmes for existing members of personnel, by recruiting new resources, or by a combination thereof; (3) maintain the personnel competence during the time they are assigned to the work role.