+Security training and awareness programme

Security training and awareness programme

The Cloud Service Provider operates a target group-oriented security awareness and training program, which is completed by all internal and external employees of the Cloud Service Provider on a regular basis. The program is regularly updated based on changes to policies and instructions and the current threat situation and includes the following aspects:
• Handling system components used to provide the cloud service in the production environment in accordance with applicable policies and procedures;
• Handling cloud customer data in accordance with applicable policies and instructions and applicable legal and regulatory requirements;
• Information about the current threat situation; and
• Correct behaviour in the event of security incidents.
Additonal CriteriaThe learning outcomes achieved through the awareness and training programme are measured and evaluated in a target group-oriented manner. The measurements cover quantitative and qualitative aspects. The results are used to improve the awareness and training programme.
Supplementary Information - About the Criteria-

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset