Template - Security Responsibilities Addendum

Information Security Responsibilities

The employee is responsible for:
- complying with information security policies, standards, and procedures;
- protecting company information and systems from unauthorized access, disclosure, modification, loss, or misuse;
- using assigned access rights only for authorized business purposes;
- protecting authentication credentials and not sharing accounts or passwords;
- reporting suspected security incidents, weaknesses, or policy violations promptly;
- completing required security awareness and role-specific training;
- handling information according to classification and handling requirements;
- complying with legal, regulatory, contractual, and organizational security obligations relevant to their role.

Additional role-specific responsibilities:
- [Add role-specific responsibility]
- [Add role-specific responsibility]
- [Add role-specific responsibility]