+8.2. Security training
---+8.2.1. The relevant entities shall identify employees, whose roles require security relevant skill …
---+8.2.2. The relevant entities shall establish, implement and apply a training program in line with …
---+8.2.3. The training referred to in point 8.2.1 shall be relevant to the job function of the …
---+8.2.4. The relevant entities shall apply training to staff members who transfer to new positions or …
---+8.2.5. The program shall be updated and run periodically taking into account applicable policies …
|
8.2. Security training
8.2. Security training
1. Vue d’ensemble
| Intitulé |
Réglementation |
|
8.2.1. The relevant entities shall identify employees, whose roles require security relevant skill …
|
|
8.2.1.
|
The relevant entities shall identify employees, whose roles require security relevant skill sets and expertise, and ensure that they receive regular training on network and information system security.
|
|
|
8.2.2. The relevant entities shall establish, implement and apply a training program in line with …
|
|
8.2.2.
|
The relevant entities shall establish, implement and apply a training program in line with the network and information security policy, topic-specific policies and other relevant procedures on network and information security which lays down the training needs for certain roles and positions based on criteria.
|
|
|
8.2.3. The training referred to in point 8.2.1 shall be relevant to the job function of the …
|
|
8.2.3.
|
The training referred to in point 8.2.1 shall be relevant to the job function of the employee and its effectiveness shall be assessed. Training shall take into consideration security measures in place and cover the following:
|
(a)
|
instructions regarding the secure configuration and operation of the network and information systems, including mobile devices;
|
|
(b)
|
briefing on known cyber threats;
|
|
(c)
|
training of the behaviour when security-relevant events occur.
|
|
|
|
8.2.4. The relevant entities shall apply training to staff members who transfer to new positions or …
|
|
8.2.4.
|
The relevant entities shall apply training to staff members who transfer to new positions or roles which require security relevant skill sets and expertise.
|
|
|
8.2.5. The program shall be updated and run periodically taking into account applicable policies …
|
|
8.2.5.
|
The program shall be updated and run periodically taking into account applicable policies and rules, assigned roles, responsibilities, as well as known cyber threats and technological developments.
|
|
,
1.1 Références
1.2 Exigences identifiées
1.3 Normes associées
2. Exigences identifiées
Exigences
| Source |
Exigence |
3. Normes associées
Tickets liés
|