GRC в кибербезопасности Пунктов: 12
Security Awareness & Training Program Review
Этот чек-лист на английском языке.
Reviews the effectiveness of the security awareness and training program including phishing simulations and role-based training.
NIST 800-53ISO 27001:2022PCI DSS 4.0
Бесплатно в PDF или Word · укажите email, чтобы скачать.
Program Foundation
- Is a documented security awareness and training program established? *
- Is security training delivered to new hires before or shortly after granting access? *
- Is refresher training delivered at least annually to all personnel? *
Content & Role-Based Training
- Does training cover phishing, social engineering, and reporting procedures? *
- Is role-based training provided to personnel with significant security responsibilities? *
- Does training address acceptable use, data handling, and incident reporting? *
Phishing Simulations
- Are simulated phishing campaigns conducted periodically? *
- Are repeat clickers provided remedial training? *
- What was the phishing simulation failure rate in the most recent campaign (%)?
Tracking & Metrics
- Is training completion tracked and recorded per individual? *
- Are completion rates reported to management? *
- What is the current annual training completion rate (%)?
Скачайте полный чек-лист «Security Awareness & Training Program Review»
Получите его бесплатно в виде аккуратного PDF для печати или редактируемого документа Word.