+8. Basic cyber hygiene practices and security training
---+8.1 Awareness raising and basic cyber hygiene practices
------+8.1.1 For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities …
------+8.1.2 For the purpose of point 8.1.1., the relevant entities shall offer to all employees, including …
------+8.1.3 The awareness raising programme shall, where appropriate, be tested in terms of effectiveness. The …
---+8.2 Security training
------+8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …
------+8.2.2 The relevant entities shall establish, implement and apply a training program in line with the …
------+8.2.3 The training referred to in point 8.2.1. shall be relevant to the job function of the employee and …
------+8.2.4 The relevant entities shall apply training to staff members who transfer to new positions or roles …
------+8.2.5 The program shall be updated and run periodically taking into account applicable policies and …

8. Basic cyber hygiene practices and security training

Basic cyber hygiene practices and security training

1. Ħarsa ġenerali

Titlu Standard
8.1 Awareness raising and basic cyber hygiene practices

Mapping to standards and frameworks

ISO standard 27001:20227.3, A.6.3, A.8.7
NIST Cybersecurity Framework v2.0PR.AT-01, PR.AT-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.2-01X, REQ-7.2-02, REQ-7.2-03X, REQ-7.2-04X, REQ-7.2-05X
CEN/TS 18026:2024HR-04, DOC-01
BE-CyFun®2023BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2
ESSENTIAL: PR.AT-1.3
FI-KybermittariWORKFORCE-2, WORKFORCE-3, WORKFORCE-4, PROGRAM-2
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 4b.e, 21a, 21c
Cybersecurity Handbook: Part B: 10.4, 10.5, 10.6, 10.7, 10.8, 10.9, 10.10, 10.11, 10.12, 10.13, 10.14, 10.15, 12.1
Self-assessment tool: 11.1, 11.5, 11.6, 13.1
ENS-Royal Decree 311/2022Article 6
Annex II [mp.per.3] Awareness
FR4.1-IE/EE
4.2-IE/EE
4.3-EE
4.4-IE/EE
4.5-IE/EE
15.1-IE/EE
8.2 Security training

Mapping to standards and frameworks

ISO standard 27001:20227.2, A.6.3
NIST Cybersecurity Framework v2.0PR.AT-01, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.2-04X, REQ-7.2-02, REQ-7.2-05X, REQ-7.2-07X, REQ-7.2-09X, REQ-7.2-12X
CEN/TS 18026:2024HR-04, PM-01
BE-CyFun®2023BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2, PR.AT-5.1, RC.IM-1.1
ESSENTIAL: PR.AT-1.3
FI-KybermittariWORKFORCE-1, WORKFORCE-2, WORKFORCE-3, WORKFORCE-4
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 21b, 21c
Cybersecurity Handbook: Part B: 12.1, 12.2, 12.3, 12.4, 12.5
Self-assessment tool: 13.1, 13.2, 13.3, 13.4, 13.5, 13.6
ENS-Royal Decree 311/2022Article 15, Article 16
Annex II [mp.per.4] Training
FR4.2-IE/EE
4.3-EE
4.4-IE/EE
15.1-IE/EE
15.2-EE
15.3-EE
15.4-EE

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors Rekwiżit

3. Regolamenti relatati

Regolamenti
Sors Regolamentazzjoni

Kwistjonijiet marbuta

  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.