Focus on the critical fact that regardless of the position an organization should always have information security as a documented part of an employee’s job description.
Explain that from an information security perspective the hiring of employees is a responsibility laden with potential security pitfalls.
Detail the prerequisites that the CISO and information security manager should establish a dialogue with the human resources (HR) department to provide information security input to the guidelines used for hiring personnel.