Assessment Objective
Determine if:
- practical exercises in literacy training that simulate events and incidents are provided.
Assessment Methods
Examine
- System security plan
- security literacy and awareness training policy
- procedures addressing security literacy and awareness training implementation
- security awareness training curriculum
- security awareness training materials
- other relevant documents or records
Interview
- Personnel who receive security literacy and awareness training
- personnel with responsibilities for security awareness training
- personnel with information security responsibilities
Test
- Mechanisms implementing cyber-attack simulations in practical exercises
Incidencias vinculadas
| Tipo de vínculo | Incidencia |
|---|---|
| blocks | 03.02.02E Literacy and Awareness Training Practical Exercises |