From 7a6d02a7fa2f2d1b8de2b119efa7292d0d6454e5 Mon Sep 17 00:00:00 2001
From: Ian Grigg
@@ -90,7 +91,8 @@ Board may add additional components into the Security Manual.
-These roles are directly covered:
+Critical roles are covered.
+These roles are defined as:
This Policy explicitly defers detailed security practices to the
Security Manual
-("SM"),
+("SM").
The SM says how things are done.
As practices are things that vary from time to time,
including between each event of practice,
@@ -1192,7 +1192,7 @@ New team members need:
+
Security Policy is no longer binding, as of 20100404
-
-
+1.1.1. Covered Personnel
1.1.2. Out of Scope
@@ -206,7 +206,7 @@ This policy document says what is done, rather than how to do it.
@@ -1200,16 +1200,17 @@ New team members need:
The team supports the process of adding new team members.
-Background checks are carried out with full seriousness. -Background checks must be conducted under the direction of the Arbitrator, +The Arbitrated Background Check ("ABC") +must be conducted under the direction of the Arbitrator, with a separate Case Manager to provide four eyes. +ABCs are carried out with full seriousness.
-An investigation should include examination of: +An investigation within ABC should include examination of:
-A background check is to be done for all critical roles. -The background check should be done on all of: +ABC is to be done on every individual in a critical role.
--The process of the background check should be documented as a procedure. +The process of the ABC should be documented as a procedure.