8.2.5 The program shall be updated and run periodically taking into account applicable policies and …

Requirement

The program shall be updated and run periodically taking into account applicable policies and rules, assigned roles, responsibilities, as well as known cyber threats and technological developments.

Guidance

• Provide cybersecurity training periodically.
• Review and update the training programme at least annually.
• Encourage participation in threat-intelligence-sharing communities to stay informed about emerging threats.

Examples of evidence

• Logs, sign-in sheets, certificates of completion or acknowledgements given to employees upon completing the training, showing which employees attended the training sessions.
• Information materials distributed to employees, including handouts, presentations and online modules.
• Updates showing that the training programme is reviewed and updated regularly to keep up with the latest cybersecurity threats and best practices.
• Employee feedback forms on the training sessions, which can provide insight into the effectiveness of the training and areas for improvement.

TIP

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

3. Susiję teisės aktai

Susietos užduotys

• ENISA -