+8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …

8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …

Requirement

The relevant entities shall identify employees, whose roles require security relevant skill sets and expertise and ensure that they receive regular training on network and information system security.

Guidance

  • Assess which roles within the entity require security-relevant skills and expertise.
  • Offer training that focuses on the specific security skills required by the identified roles.
  • Consider globally recognized qualifications and certifications, and the ECSF (80).

Examples of evidence

  • A comprehensive outline of the training programme, detailing the objectives for different roles and how to reach them, content and frequency of the training.

1. Översikt

Rubrik Standard

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav
Källa Krav

3. Relaterade regleringar

Regleringar
Källa Reglering

Länkade ärenden