साइबर सुरक्षा GRC 12 आइटम
Security Awareness & Training Program Review
यह चेकलिस्ट अंग्रेज़ी में है।
Reviews the effectiveness of the security awareness and training program including phishing simulations and role-based training.
NIST 800-53ISO 27001:2022PCI DSS 4.0
मुफ़्त PDF या Word · डाउनलोड करने के लिए अपना ईमेल दर्ज करें।
Program Foundation
- Is a documented security awareness and training program established? *
- Is security training delivered to new hires before or shortly after granting access? *
- Is refresher training delivered at least annually to all personnel? *
Content & Role-Based Training
- Does training cover phishing, social engineering, and reporting procedures? *
- Is role-based training provided to personnel with significant security responsibilities? *
- Does training address acceptable use, data handling, and incident reporting? *
Phishing Simulations
- Are simulated phishing campaigns conducted periodically? *
- Are repeat clickers provided remedial training? *
- What was the phishing simulation failure rate in the most recent campaign (%)?
Tracking & Metrics
- Is training completion tracked and recorded per individual? *
- Are completion rates reported to management? *
- What is the current annual training completion rate (%)?
पूरी Security Awareness & Training Program Review चेकलिस्ट डाउनलोड करें
इसे साफ़-सुथरे, प्रिंट करने योग्य PDF या संपादन योग्य Word दस्तावेज़ के रूप में मुफ़्त पाएँ।