
150 ◾ The Security Risk Assessment Handbook
© 2011 by Taylor & Francis Group, LLC
◾ Employment Checks—When called concerning a reference check, employers
are only expected to provide information concerning the date of hire, date of
termination, and job title. If the applicant has signed a “hold harmless” agree-
ment with the previous employer, additional information may be provided.
Although employers may provide this information without such an agree-
ment, it is unlikely they will.
Table6.1 Administrative Threats and Safeguards (Continued)
Area Class Threat Safeguard
System
security
System controls
Applications
security
Change
management
Third-party ...