+8. Basic cyber hygiene practices and security training
---+8.1 Awareness raising and basic cyber hygiene practices
------+8.1.1 For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities …
------+8.1.2 For the purpose of point 8.1.1., the relevant entities shall offer to all employees, including …
------+8.1.3 The awareness raising programme shall, where appropriate, be tested in terms of effectiveness. The …
---+8.2 Security training
------+8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …
------+8.2.2 The relevant entities shall establish, implement and apply a training program in line with the …
------+8.2.3 The training referred to in point 8.2.1. shall be relevant to the job function of the employee and …
------+8.2.4 The relevant entities shall apply training to staff members who transfer to new positions or roles …
------+8.2.5 The program shall be updated and run periodically taking into account applicable policies and …

8. Basic cyber hygiene practices and security training

Basic cyber hygiene practices and security training

1. Resumen

8.1 Awareness raising and basic cyber hygiene practices

Mapping to standards and frameworks

ISO standard 27001:20227.3, A.6.3, A.8.7
NIST Cybersecurity Framework v2.0PR.AT-01, PR.AT-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.2-01X, REQ-7.2-02, REQ-7.2-03X, REQ-7.2-04X, REQ-7.2-05X
CEN/TS 18026:2024HR-04, DOC-01
BE-CyFun®2023BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2
ESSENTIAL: PR.AT-1.3
FI-KybermittariWORKFORCE-2, WORKFORCE-3, WORKFORCE-4, PROGRAM-2
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 4b.e, 21a, 21c
Cybersecurity Handbook: Part B: 10.4, 10.5, 10.6, 10.7, 10.8, 10.9, 10.10, 10.11, 10.12, 10.13, 10.14, 10.15, 12.1
Self-assessment tool: 11.1, 11.5, 11.6, 13.1
ENS-Royal Decree 311/2022Article 6
Annex II [mp.per.3] Awareness
FR4.1-IE/EE
4.2-IE/EE
4.3-EE
4.4-IE/EE
4.5-IE/EE
15.1-IE/EE
8.2 Security training

Mapping to standards and frameworks

ISO standard 27001:20227.2, A.6.3
NIST Cybersecurity Framework v2.0PR.AT-01, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.2-04X, REQ-7.2-02, REQ-7.2-05X, REQ-7.2-07X, REQ-7.2-09X, REQ-7.2-12X
CEN/TS 18026:2024HR-04, PM-01
BE-CyFun®2023BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2, PR.AT-5.1, RC.IM-1.1
ESSENTIAL: PR.AT-1.3
FI-KybermittariWORKFORCE-1, WORKFORCE-2, WORKFORCE-3, WORKFORCE-4
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 21b, 21c
Cybersecurity Handbook: Part B: 12.1, 12.2, 12.3, 12.4, 12.5
Self-assessment tool: 13.1, 13.2, 13.3, 13.4, 13.5, 13.6
ENS-Royal Decree 311/2022Article 15, Article 16
Annex II [mp.per.4] Training
FR4.2-IE/EE
4.3-EE
4.4-IE/EE
15.1-IE/EE
15.2-EE
15.3-EE
15.4-EE

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
is related to 8. Basic cyber hygiene practices and security training (Article 21(2), point (g), of Directive (EU) …