+AT-02(01) Practical Exercises
|
AT-02(01) Practical Exercises
Control
Provide practical exercises in literacy training that simulate events and incidents.
Discussion
Practical exercises include no-notice social engineering attempts to collect information, gain unauthorized access, or simulate the adverse impact of opening malicious email attachments or invoking, via spear phishing attacks, malicious web links.
Assessment Objective
practical exercises in literacy training that simulate events and incidents are provided.
Assessment Method
Examine
System security plan
privacy plan
security awareness and training policy
procedures addressing security awareness training implementation
security awareness training curriculum
security awareness training materials
other relevant documents or records
Interview
Organizational personnel who receive literacy training and awareness
organizational personnel with responsibilities for security awareness training
organizational personnel with information security responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|