8.1.1 For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities …

Requirement

For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities shall ensure that their employees are aware of risks, are informed of the importance of cybersecurity and apply cyber hygiene practices.

Guidance

• Implement cybersecurity awareness programmes:
  • use various formats, such as workshops, webinars and e-learning modules;
  • use multiple communication channels (emails, newsletters and intranet) to keep employees informed about cybersecurity updates, risks and cyber hygiene practices for users.

Examples of evidence

• Awareness raising programme, for example a comprehensive outline of the programme, detailing its objectives, content, frequency, syllabus and schedule.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -