Alessandro AleddaInsider Threat and Risk

INTRA/IV/IV010Decision record

The record of what was examined, on what basis, by whom the decision was taken, and what was concluded.

Pillar
IV  |  Investigation and digital forensics
Sources cited
3
Added
30 AUGUST 2026
Updated
30 AUGUST 2026
ControlJurisdictionSourceWhat it establishesPrerequisite or recommendation
IV010/FIMandatoryFinlandLaki yksityisyyden suojasta työelämässä (759/2004)Parliament of Finland · read 29 Aug 2026One act for the whole subject, holding processing to what is directly necessary, naming the conditions for cameras and for opening the employer’s electronic mail, and putting technical monitoring through a cooperation procedure before it is introduced.Both the retrieval and the opening are written up, signed by those who carried them out, and submitted to the employee without undue delay.
IV010/NOMandatoryNorwayForskrift om arbeidsgivers innsyn i e-postkasse og annet elektronisk lagret materialeArbeids- og inkluderingsdepartementet · read 29 Aug 2026When an employer may look into a work mailbox or a worker’s personal areas on its equipment, that monitoring of internet use is outside what it may do at all, and that the regulation cannot be contracted around.The written notice states the method of access used, which messages or documents were opened, and what the access found.
IV010/ESMandatorySpainReal Decreto 311/2022, Esquema Nacional de SeguridadGobierno de España · read 29 Aug 2026The security measures a Spanish public sector body has to apply, graded by category, among them the concurrence of two people on critical tasks so that no single authorized individual can abuse their rights, an access control on the activity records themselves, and the recording of evidence where an incident may end in disciplinary action.Every action bearing on the handling of an incident is recorded, the initial, intermediate, and final reports among them. Evidence that may have to be settled before a court is recorded as such, and the decree names when that matters most: where the incident may lead to disciplinary action against internal staff or an external supplier, or to the prosecution of an offense. Specialized legal advice is taken on what those evidences have to comprise.