Information security awareness, education and training
A.6.3
-
Last updated
Applicable
Catalog reference
Provide ongoing awareness, education, and training for all personnel (and relevant external parties) on the organisation's information security policies and their role in upholding them.
Narrative — how we satisfy this requirement
A new starter takes the orientation course in the first week, and engineers take the course on secure administration of customer systems.
None due within 31 days.