8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …

Requirement

The relevant entities shall identify employees, whose roles require security relevant skill sets and expertise and ensure that they receive regular training on network and information system security.

Guidance

• Assess which roles within the entity require security-relevant skills and expertise.
• Offer training that focuses on the specific security skills required by the identified roles.
• Consider globally recognized qualifications and certifications, and the ECSF (80).

Examples of evidence

• A comprehensive outline of the training programme, detailing the objectives for different roles and how to reach them, content and frequency of the training.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• ENISA -