8.2.4 The relevant entities shall apply training to staff members who transfer to new positions or roles …

Requirement

The relevant entities shall apply training to staff members who transfer to new positions or roles which require security relevant skill sets and expertise.

Guidance

• Examine whether the new position or role of an employee requires role-specific network and information security training.

Examples of evidence

• Logs, sign-in sheets, certificates of completion or acknowledgements given to employees upon completing the training, showing that employees who transferred to new positions or roles attended training sessions relevant to the new position or role.
• Evidence of maintenance of certifications obtained.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -