2.1 Awareness and personnel
Individuals within Renewi come to work every day to perform their jobs to the best of their ability. These individuals have the appropriate intentions and seek out information on the best ways to perform their jobs. There is however a threat for malicious, negligent or accidental fraudulent transactions, which could cause information assets to be damaged or destroyed.
It is therefore a key element for Renewi to ensure that all employees, contractors and third party users are aware of information security threats and concerns and understand their responsibilities to reduce the risk of human error theft, fraud or misuse of facilities. Renewi’s personnel are provided cybersecurity awareness education and are trained to perform their cybersecurity-related duties and responsibilities consistent with related policies, procedures, and agreements.
Key principles
IT Code of conduct
Renewi maintains an IT code conduct that clarifies the organization's mission, values and principles, with respect to information security, linking them with standards of professional conduct. The IT Code of conduct is distributed to all employees as part of the HR joiners process.
Information Security Awareness
Renewi actively educates employees on potential security threats and what they can do to prevent them. This will be carried out by:
- Publishing periodic news items;
- Raising information security awareness campaigns;
- Perform social engineering tests (e.g. phishing campaigns);
- Perform training (e.g. through HR ‘Learn from colleagues’ sessions or e-Learnings).
Terms of employment
As part of their contractual obligation, employees, contractors and third party users agree and sign the terms and conditions of their employment contract, which shall state their and the organization’s responsibilities for information security.
Information Security Awareness
Renewi actively educates employees on potential security threats and what they can do to prevent them. This will be carried out by:
- Publishing periodic news items;
- Raising information security awareness campaigns;
- Perform social engineering tests (e.g. phishing campaigns);
- Perform training (e.g. through HR ‘Learn from colleagues’ sessions or e-Learnings).
Renewi’s Information Security Officer is responsible for carrying out these activities.
Termination
All employees, contractors and third party users will return all of the organization’s assets in their possession upon termination of their employment, contract or agreement.