← ISO 27001 Annex A in plain English

A.6.1 A.6

People / A.6.1

Screening candidates before they are trusted with access

Think of it likeAsking for references before handing over a key to the house.

In plain English

The family checks who someone is before trusting them with access, in proportion to how much that access could hurt if it were misused.

Related CSF and CIS controls (unofficial mapping)