ExportableProof — Routines today. Proof tomorrow.

Policy

Human Resources Security Policy

This document is Arcfield's Human Resources Security Policy, document ID HR-SEC-POL-002. It binds personnel-security duties before, during and after employment or engagement: screening, awareness, role-change access, conduct and termination obligations. It is not the ISMS Scope Statement, the Risk Assessment Methodology or the Statement of Applicability. It applies to Arcfield Platform production, customer data, CI/CD, privileged access and critical suppliers. Neighbouring records cite this Document Control version. Do not copy these paragraphs into those records.

This file is a fictional Arcfield example, not your organization's approved policy. Copy this file as the controlled Word master for your ISMS only after you replace Arcfield decisions with your own.

Back to demo

Demo. This is an Arcfield simulation, not a customer record. Provided as-is, without warranty. It does not replace professional legal, audit, or certification advice.

OSCAL source · HRSP

{
  "artifactId": "HRSP",
  "iso": [
    "A.6.1",
    "A.6.2",
    "A.6.3",
    "A.6.5",
    "7.2"
  ],
  "catalog": [
    {
      "iso": "A.6.1",
      "oscalId": "iso27001-a.6.1",
      "title": "Screening",
      "className": "iso27001-annex-a",
      "group": "People controls (Annex A.6)"
    },
    {
      "iso": "A.6.2",
      "oscalId": "iso27001-a.6.2",
      "title": "Terms and conditions of employment",
      "className": "iso27001-annex-a",
      "group": "People controls (Annex A.6)"
    },
    {
      "iso": "A.6.3",
      "oscalId": "iso27001-a.6.3",
      "title": "Information security awareness, education and training",
      "className": "iso27001-annex-a",
      "group": "People controls (Annex A.6)"
    },
    {
      "iso": "A.6.5",
      "oscalId": "iso27001-a.6.5",
      "title": "Responsibilities after termination or change of employment",
      "className": "iso27001-annex-a",
      "group": "People controls (Annex A.6)"
    },
    {
      "iso": "7.2",
      "oscalId": "iso27001-7.2",
      "title": "Competence",
      "className": "iso27001-clause",
      "group": "Support"
    }
  ],
  "profileAlters": [
    {
      "control-id": "iso27001-7.2",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "ISO/IEC 27001:2022 management-system clause. Always in the certification scope; not subject to Annex A SoA exclusion."
            },
            {
              "name": "implementation-status",
              "value": "always-in-scope"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.1",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required for relevant roles before employment."
            },
            {
              "name": "implementation-status",
              "value": "Implemented"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.2",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required for contractual security obligations."
            },
            {
              "name": "implementation-status",
              "value": "Implemented"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.3",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required for staff and contractors."
            },
            {
              "name": "implementation-status",
              "value": "Implemented"
            }
          ]
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.5",
      "adds": [
        {
          "props": [
            {
              "name": "applicability",
              "value": "applicable"
            },
            {
              "name": "applicability-justification",
              "value": "Required for offboarding and role changes."
            },
            {
              "name": "implementation-status",
              "value": "Implemented"
            }
          ]
        }
      ]
    }
  ],
  "components": [
    {
      "uuid": "b661daa8-ace5-5c03-a684-567fe1dd9941",
      "type": "policy",
      "title": "Arcfield Human Resources Security Policy (SIMULATION)",
      "purpose": "Define personnel security responsibilities before, during and after employment or engagement.",
      "props": [
        {
          "name": "simulation",
          "value": "true"
        },
        {
          "name": "artifact-id",
          "value": "HRSP"
        },
        {
          "name": "object-type",
          "value": "policy"
        },
        {
          "name": "comparison",
          "value": "a"
        },
        {
          "name": "pack-role",
          "value": "in-pack"
        },
        {
          "name": "implemented-requirement-count",
          "value": "5"
        },
        {
          "name": "volumes",
          "value": "1,2"
        },
        {
          "name": "unresolved-cites",
          "value": "SINV"
        }
      ]
    }
  ],
  "sspImplementedRequirements": [
    {
      "control-id": "iso27001-7.2",
      "props": [
        {
          "name": "iso-id",
          "value": "7.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "HR Manager"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        },
        {
          "name": "unresolved-evidence",
          "value": "TR; TRC; HRP"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "CMTP"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        },
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-7.3",
      "props": [
        {
          "name": "iso-id",
          "value": "7.3"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "always-in-scope"
        },
        {
          "name": "control-owner",
          "value": "Security Lead"
        },
        {
          "name": "evidence-status",
          "value": "documented"
        },
        {
          "name": "unresolved-evidence",
          "value": "TRC"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "ISOCL"
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.1",
      "props": [
        {
          "name": "iso-id",
          "value": "A.6.1"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "Implemented"
        },
        {
          "name": "control-owner",
          "value": "HR Manager"
        },
        {
          "name": "evidence-status",
          "value": "Partial"
        },
        {
          "name": "unresolved-evidence",
          "value": "HR-ONB-2026-023"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "ISOCTRL"
        },
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.2",
      "props": [
        {
          "name": "iso-id",
          "value": "A.6.2"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "Implemented"
        },
        {
          "name": "control-owner",
          "value": "HR Manager"
        },
        {
          "name": "evidence-status",
          "value": "Complete"
        },
        {
          "name": "unresolved-evidence",
          "value": "HR-ONB-2026-023"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "ISOCTRL"
        },
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.3",
      "props": [
        {
          "name": "iso-id",
          "value": "A.6.3"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "Implemented"
        },
        {
          "name": "control-owner",
          "value": "HR Manager"
        },
        {
          "name": "evidence-status",
          "value": "Complete"
        },
        {
          "name": "unresolved-evidence",
          "value": "TRAIN-REC-2026-188"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "ISOCTRL"
        },
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    },
    {
      "control-id": "iso27001-a.6.5",
      "props": [
        {
          "name": "iso-id",
          "value": "A.6.5"
        },
        {
          "name": "applicability",
          "value": "applicable"
        },
        {
          "name": "evidence-layer",
          "value": "linked"
        },
        {
          "name": "implementation-status-raw",
          "value": "Implemented"
        },
        {
          "name": "control-owner",
          "value": "HR Manager"
        },
        {
          "name": "evidence-status",
          "value": "Complete"
        },
        {
          "name": "unresolved-evidence",
          "value": "OFC"
        }
      ],
      "links": [
        {
          "rel": "cites",
          "text": "SOA"
        },
        {
          "rel": "cites",
          "text": "ISOCTRL"
        },
        {
          "rel": "cites",
          "text": "HRSP"
        },
        {
          "rel": "cites",
          "text": "MDR"
        },
        {
          "rel": "cites",
          "text": "DR"
        },
        {
          "rel": "cites",
          "text": "RRS"
        },
        {
          "rel": "cites",
          "text": "AI"
        },
        {
          "rel": "cites",
          "text": "UAI"
        }
      ]
    }
  ]
}

Check installation

What is installed here. Extra volumes are optional and do not change Ready. Update re-runs the check.

CheckResult
Webserver…
Python…
Volumes…
Scripts…
Ready…
Working directory…
Last update…