+PM-13 Security and Privacy Workforce
|
PM-13 Security and Privacy Workforce
Control
Establish a security and privacy workforce development and improvement program.
Discussion
Security and privacy workforce development and improvement programs include defining the knowledge, skills, and abilities needed to perform security and privacy duties and tasks; developing role-based training programs for individuals assigned security and privacy roles and responsibilities; and providing standards and guidelines for measuring and building individual qualifications for incumbents and applicants for security- and privacy-related positions. Such workforce development and improvement programs can also include security and privacy career paths to encourage security and privacy professionals to advance in the field and fill positions with greater responsibility. The programs encourage organizations to fill security- and privacy-related positions with qualified personnel. Security and privacy workforce development and improvement programs are complementary to organizational security awareness and training programs and focus on developing and institutionalizing the core security and privacy capabilities of personnel needed to protect organizational operations, assets, and individuals.
Assessment Objective
- a security workforce development and improvement program is established;
- a privacy workforce development and improvement program is established.
Assessment Method
Examine
Information security program plan
privacy program plan
information security and privacy workforce development and improvement program documentation
procedures for the information security and privacy workforce development and improvement program
information security and privacy role-based training program documentation
other relevant documents or records
Interview
Organizational personnel with information security and privacy program planning and plan implementation responsibilities
organizational personnel responsible for the information security and privacy workforce development and improvement program
organizational personnel with information security and privacy responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|