Requirement
"Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy, topic-specific policies and procedures, as relevant for their job function."[1]
Explanation
Security awareness training helps personnel identify and avoid security threats. It also informs them of the organization's security policies as well as how to report incidents. Security training can be provided using e-learning courses or class training.
