What is a disciplinary process?
A disciplinary process is the formal procedure for handling employees who break policy, including security policy. It sets out how violations are investigated and what consequences can follow. ISO 27001 lists it as a people control.
What the buyer is really asking
Buyers want to know that breaking security policy has consequences. Point to the disciplinary clause in your policies or handbook. You do not need to share cases.
Other ways buyers ask it
Every one of these wants the same answer:
- “What is the process for handling security violations by employees?”
- “Do you have a disciplinary process for policy violations?”
- “How are employees held accountable for security policy?”
Evidence to have ready
- The enforcement section of your security policy
- The disciplinary section of your employee handbook
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.
Related hr security questions
- What controls require unattended workspaces to be cleared, with papers, screens, and removable media holding sensitive information concealed or secured?
- Do you perform background checks on all employees and contractors?
- Do employees sign confidentiality or non-disclosure agreements (NDAs)?
- Describe the security onboarding and offboarding process for employees.