New-Hire Agreement — Security Terms

Owner	[Security Owner / management]
Status	0.2 — DRAFT (delta on Drata’s template) · needs counsel
TSC mapping	CC1.1 / CC1.4 (New Hire Contracts)

Use Drata’s new-hire / confidentiality agreement template as the base. This file lists the security-relevant clauses to ensure are present. Counsel reviews before use.

Every employee and contractor signs before receiving system access. The agreement includes:

• Confidentiality / NDA covering Company and customer confidential info (incl. PII + PO data).
• Acknowledgement of the Acceptable Use Policy — endpoint baseline (disk encryption, screen lock, anti-malware, auto-update, password manager) + MFA.
• IP assignment of work product.
• Data-handling per the Data Classification & Retention Policy; individual (non-shared) accounts.
• Background-check consent (where lawful / applicable).
• Return of property + prompt access revocation on exit (Access Control §4).
• Policy acknowledgement on hire and annually (tracked in Drata).