Awareness
7.3
-
Last updated
Mandatory
Catalog reference
Ensure people doing work under the organisation's control are aware of the security policy, their contribution to the ISMS, and the implications of not conforming.
Narrative — how we satisfy this requirement
Every employee, contractor, and intern takes the security awareness and phishing courses, and the Training matrix shows who is due for a repeat.
- TSK-0032 by Sam de Vries