M3.1.1 - AWARENESS AND TRAINING POLICY Implementation Guidance
The entity shall develop and maintain an awareness and training policy.
Back to M3.1.1 -P2 - AWARENESS AND TRAINING POLICY
Critical entities shall also take into account NESA’s relevant issuances, guidance, and activities with regards to National Awareness and Capability Building.
The policy document should contain statements concerning:
- A. The purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance
- B. The procedures to facilitate the implementation of the security awareness and training policy and associated security awareness and training controls
- C. Factors to consider when awareness and training objectives are identified
