Awareness
7.3
-
Last updated
Mandatory
Catalog reference
Ensure people doing work under the organisation's control are aware of the security policy, their contribution to the ISMS, and the implications of not conforming.
Narrative — how we satisfy this requirement
Every employee, contractor, and intern takes the security awareness and phishing courses, and the Training matrix shows who is due for a repeat.
Review
On trackNext review is 10/27/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due