+AT-03(03) Practical Exercises
|
AT-03(03) Practical Exercises
Control
Provide practical exercises in security and privacy training that reinforce training objectives.
Discussion
Practical exercises for security include training for software developers that addresses simulated attacks that exploit common software vulnerabilities or spear or whale phishing attacks targeted at senior leaders or executives. Practical exercises for privacy include modules with quizzes on identifying and processing personally identifiable information in various scenarios or scenarios on conducting privacy impact assessments.
Assessment Objective
- practical exercises in security training that reinforce training objectives are provided;
- practical exercises in privacy training that reinforce training objectives are provided.
Assessment Method
Examine
Security and privacy awareness and training policy
procedures addressing security and privacy awareness training implementation
security and privacy awareness training curriculum
security and privacy awareness training materials
security and privacy awareness training reports and results
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel with responsibilities for role-based security and privacy training
organizational personnel who participate in security and privacy awareness training
1. Apžvalga
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
| Šaltinis |
Reikalavimas |
3. Susiję teisės aktai
Teisės aktai
| Šaltinis |
Reguliavimas |
Susietos užduotys
|