Managing Personnel Security Risks for Suppliers

This guide provides essential guidance for suppliers of Rolls-Royce regarding the management of personnel security risks associated with employees and contractors who have access to Rolls-Royce data. It outlines the importance of adhering to Rolls-Royce personnel policies and procedures to protect sensitive data and mitigate security risks. The document details the requirements for implementing a personnel risk-reduction program, including conducting background checks, managing access to data, and providing security training. Additionally, it emphasizes the necessity of maintaining compliance with the Minimum Cyber Security Standard (MCSS) and the Baseline Personnel Security Standard (BPSS). The guide also covers the processes for verifying identity, employment history, financial status, and criminal history, while highlighting the importance of data protection and retention policies. Furthermore, it encourages suppliers to foster a culture of security awareness and to monitor behaviors that may indicate potential security risks.