Requirement
A Cybersecurity Awareness Program Must Be Developed And Approved. The Program Must Be Conducted Periodically Through Multiple Channels To Strengthen The Awareness About Cybersecurity, Cyber Threats And Risks, And To Build A Positive Cybersecurity Awareness Culture.
Control Implementation Guidelines
- Develop and approve cybersecurity awareness program and plan in the organization through multiple channels periodically, including but not limited to:
- Awareness emails
- Cybersecurity awareness workshops
- Distribution of awareness publications
- Awareness presentation through billboards
- Launch of a cybersecurity training and awareness platform
- The program may include a plan to coordinate with the Human Resources department, the Media and Internal Communications department, and the cybersecurity function to raise awareness of cybersecurity, its threats and risks, and build a positive cybersecurity culture
- The organization's program must be supported by the Executive Management. This must be done through the approval of the representative.
Relevant Cybersecurity Tools
- Awareness program template
- Awareness content template for all employees
- Awareness content form for supervisory and executive positions
- Information and Technology Assets Operators Awareness Content Form
Expected Deliverables
- The awareness program document approved by the organization
