8.2.2 The relevant entities shall establish, implement and apply a training program in line with the …

Requirement

The relevant entities shall establish, implement and apply a training program in line with the network and information security policy, topic-specific policies and other relevant procedures on network and information security which lays down the training needs for certain roles and positions based on criteria.

Guidance

• Provide role-specific network and information security training (81).
• Consider various training methods, such as online courses, workshops, hands-on labs and simulations.
• Consider various types of training, such as courses, certifications or attending security conferences or webinars, and the maintenance of certifications.
• Examples of training may include secure system administration courses for IT professionals, Open Worldwide Application Security Project ® awareness and prevention training for web application developers and advanced social engineering awareness training for high-profile roles.

Examples of evidence

• A comprehensive outline of the training programme, detailing the objectives for different roles and how to reach them, content and frequency of the training.
• Assessment of effect and feedback from trainings.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

3. Σχετικοί κανονισμοί

Συνδεδεμένα ζητήματα

• ENISA -

  EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

  DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.