+AT-02(06) Cyber Threat Environment
|
AT-02(06) Cyber Threat Environment
Control
- Provide literacy training on the cyber threat environment; and
- Reflect current cyber threat information in system operations.
Discussion
Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.
Assessment Objective
- literacy training on the cyber threat environment is provided;
- system operations reflects current cyber threat information.
Assessment Method
Examine
System security plan
privacy plan
literacy training and awareness policy
procedures addressing literacy training and awareness training implementation
literacy training and awareness curriculum
literacy training and awareness materials
other relevant documents or records
Interview
Organizational personnel who receive literacy training and awareness
organizational personnel with responsibilities for basic literacy training and awareness
organizational personnel with information security and privacy responsibilities
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|