03.02.01 Literacy Training and Awareness

This policy outlines the requirements for security literacy training programs for all system users within the organization. It aims to ensure that all personnel have the necessary knowledge and skills to understand and comply with organizational security policies and procedures, recognize and respond to security threats, and protect sensitive information.

• A.03.02.01.ODP[01]: the frequency at which to provide security literacy training to system users after initial training is defined.
• A.03.02.01.ODP[02]: events that require security literacy training for system users are defined.
• A.03.02.01.ODP[03]: the frequency at which to update security literacy training content is defined.
• A.03.02.01.ODP[04]: events that require security literacy training content updates are defined.
• A.03.02.01.a.01[01]: security literacy training is provided to system users as part of initial training for new users.
• A.03.02.01.a.01[02]: security literacy training is provided to system users <A.03.02.01.ODP[01]: frequency> after initial training.
• A.03.02.01.a.02: security literacy training is provided to system users when required by system changes or following <A.03.02.01.ODP[02]: events>.
• A.03.02.01.a.03[01]: security literacy training is provided to system users on recognizing indicators of insider threat.
• A.03.02.01.a.03[02]: security literacy training is provided to system users on reporting indicators of insider threat.
• A.03.02.01.a.03[03]: security literacy training is provided to system users on recognizing indicators of social engineering.
• A.03.02.01.a.03[04]: security literacy training is provided to system users on reporting indicators of social engineering.
• A.03.02.01.a.03[05]: security literacy training is provided to system users on recognizing indicators of social mining.
• A.03.02.01.a.03[06]: security literacy training is provided to system users on reporting indicators of social mining.
• A.03.02.01.b[01]: security literacy training content is updated <A.03.02.01.ODP[03]: frequency>.
• A.03.02.01.b[02]: security literacy training content is updated following <A.03.02.01.ODP[04]: events>.