PRO-14 Cyber security awareness training
2 actions under this Protect principle in Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Personnel are provided with ongoing cyber security awareness training, including operational security considerations, tailored to their duties, access levels and current cyber threats.
Quoted as published. Everything else on this page is written by Control Stack.
The two actions
- IT.PRO-14.1Require Role-Tailored Cyber Security Awareness Training Before Granting Access
Gives everyone cyber security training suited to their role before they get access to the organisation's systems and data.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environments - IT.PRO-14.2Regularly Update and Deliver Security Awareness Training as Threats and Operations Change
Keeps cyber security training up to date with current threats and how people work, and keeps everyone trained.
Domains:Governance and culture
Back to the full ASD Essentials for enterprise IT action list, or browse the complete control library.