사이버보안 GRC 12개 항목
Security Awareness & Training Program Review
이 체크리스트는 영어로 제공됩니다.
Reviews the effectiveness of the security awareness and training program including phishing simulations and role-based training.
NIST 800-53ISO 27001:2022PCI DSS 4.0
무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.
Program Foundation
- Is a documented security awareness and training program established? *
- Is security training delivered to new hires before or shortly after granting access? *
- Is refresher training delivered at least annually to all personnel? *
Content & Role-Based Training
- Does training cover phishing, social engineering, and reporting procedures? *
- Is role-based training provided to personnel with significant security responsibilities? *
- Does training address acceptable use, data handling, and incident reporting? *
Phishing Simulations
- Are simulated phishing campaigns conducted periodically? *
- Are repeat clickers provided remedial training? *
- What was the phishing simulation failure rate in the most recent campaign (%)?
Tracking & Metrics
- Is training completion tracked and recorded per individual? *
- Are completion rates reported to management? *
- What is the current annual training completion rate (%)?
Security Awareness & Training Program Review 체크리스트 전체 다운로드
인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.