Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity Awareness And Training Program
To ensure that personnel are aware of their cybersecurity responsibilities and have the essential cybersecurity awareness. it is also to ensure that personnel are provided with the required cybersecurity training, skills and credentials needed to accomplish their cybersecurity responsibilities and to protect the organization’s information and technology assets.
-
1-10-1
A Cybersecurity Awareness Program Must Be Developed And Approved. The Program Must Be Conducted Periodically Through Multiple Channels To Strengthen The Awareness About Cybersecurity, Cyber Threats And Risks, And To Build A Positive Cybersecurity Awareness Culture.
-
1-10-2
The Cybersecurity Awareness Program Must Be Implemented.
-
1-10-3
The cybersecurity awareness program must cover the latest cyber threats and how to protect against them, and must include at least the following subjects:
-
1-10-4
Essential and customized (i.e., tailored to job functions as it relates to cybersecurity) training and access to professional skillsets must be made available to personnel working directly on tasks related to cybersecurity including:
-
1-10-5
The implementation of the cybersecurity awareness program must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo