INTRA/CP/CP001Disciplinary action on monitoring evidence
Action taken against a person on the basis of what the program observed, short of ending the relationship.
| Control | Jurisdiction | Source | What it establishes | Prerequisite or recommendation |
|---|---|---|---|---|
| CP001/EUMandatory | European Union | Commission Implementing Regulation (EU) 2024/2690European Commission · read 29 Aug 2026 | What the directive’s categories hold, in an annex setting out asset classification, the inventory, access control, privileged accounts, and removable media as requirements rather than as headings. | For the digital infrastructure and service providers it reaches, a disciplinary process for handling violations of the security policies is established, communicated, and maintained, and it takes the legal, statutory, contractual, and business requirements into account. It is reviewed at planned intervals and when a change in the law calls for it. What may be relied on to establish a violation is not addressed. |
| CP001/ATMandatory | Austria | Arbeitsverfassungsgesetz, sections 96 and 96aNationalrat · read 29 Aug 2026 | That a control measure touching human dignity has no legal effect without the works council’s consent, and that consent for automated processing and for assessment systems can be replaced by a conciliation board while consent under section 96 cannot. | A workplace disciplinary code has no legal effect without the works council’s consent, so what may follow from what the program observed is settled with the workforce before any case arises. |
| Reported | Czechiawhere written | Redefining Threats: Extending the Threat Response Focus from External to Internal ThreatsHološka and Doucek · read 30 Aug 2026 | How the examination of an employee is divided between security, human resources, and legal, what a classification level governs once it has been applied, and which restrictions are placed on a person serving out notice when they cannot be placed on everyone. | The final assessment of the examination is made against the organization’s own rules and recommendations, and it is from that assessment that disciplinary proceedings follow, where they follow. |