Requirement
The Cybersecurity Awareness Program Must Be Implemented.
Control Implementation Guidelines
- Implement the approved cybersecurity awareness and training program in coordination with the cybersecurity awareness and training department, which may include the following:
- Implement the approved cybersecurity awareness program in the organization, including but not limited to sending awareness emails or conducting cybersecurity awareness workshops
- Evaluate cybersecurity awareness of all personnel and define and address cybersecurity weaknesses
Expected Deliverables
- Action plan to implement the cybersecurity awareness program adopted by the organization
- Awareness programs to be shared with employees
- List of beneficiaries of awareness programs
