Skip to content

Awareness Campaign

What is Awareness Campaign?

An organized effort to educate employees about specific security threats and best practices through multiple communication channels.

Information Security

Frameworks that govern awareness campaign

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on awareness campaign

Requirements naming awareness campaign across 6 standards, quoted from the control text.

Ghana Cybersecurity Act1 control

Ghana CSA Child Online Protection + Awareness + International Cooperation (Parts IX-X of Act 1038). CHILD ONLINE PROTECTION (Sec.131-145): (a) CRIMINAL OFFENCES against children online - CSAM (child sexual abuse material) production + distribution + possession...

GhCSA-Child-OnlineProtection-Awareness-Intl-Coop · Child Online Protection, Awareness, Education and International Cooperation →
HKMA Cyber Resilience Assessment Framework (C-RAF)1 control

HKMA C-RAF Domain 3 PROTECTION + Domain 4 DETECTION. DOMAIN 3 PROTECTION (6 sub-areas): (1) ACCESS CONTROL - identity + access management + privileged access (PAM) + MFA + zero trust + just-in-time access + role-based access + access reviews + offboarding;

HKMA-CRAF-Domain3-4-Protection-Detection · HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel →
India CERT-In Cyber Security Directions 20221 control

Audit + Drills + Training operationalise the Directions through ongoing assurance + cyber preparedness. (1) CERT-In Cyber Security Audit: organisations should undergo periodic cyber security audit by CERT-In Empanelled Information Security Auditing Organisatio...

CERTIN-Audit-Drills-Training-AwarenessProgram-CERTInExercises-CISO · CERT-In Audit + Cyber Security Drills + Training + Awareness + CERT-In Cyber Exercises + CISO + Information Security Auditor Empanelment →
Laos Law on Prevention and Combating Cybercrime (2015)1 control

Laos Cybercrime Law Article 20 prevention through awareness campaigns + education + capacity building. State responsibility to promote public awareness of cybersecurity threats + safe internet use + responsible online behaviour.

LAOS-CC-Prevention-Awareness-Education-Article-20-Public-Campaigns-Capacity-Building · Laos Cybercrime Prevention + Awareness + Education + Article 20 + Public Campaigns + Capacity Building →
Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016)1 control

Per Papua New Guinea National Cybersecurity Policy: awareness + capacity building + privacy. Requirements include (a) deliver Cybersecurity Awareness and Capacity Building programmes including awareness campaigns + training + skills development + (b) integrate...

PNGCYBER-6 · Cybersecurity Awareness, Capacity Building, and Privacy Considerations →
Tennessee Information Protection Act (TIPA)1 control

Staff handling personal data must receive privacy training calibrated to their role, refreshed regularly, and supported by awareness campaigns.

TIPA-17 · Training and Workforce Awareness →

Questions people ask about awareness campaign

What is Awareness Campaign?
An organized effort to educate employees about specific security threats and best practices through multiple communication channels.
Why is Awareness Campaign important for compliance?
Awareness Campaign is a key concept in Information Security. Understanding awareness campaign helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Awareness Campaign?
Awareness Campaign appears in the requirement text of Ghana Cybersecurity Act, HKMA Cyber Resilience Assessment Framework (C-RAF), India CERT-In Cyber Security Directions 2022, Laos Law on Prevention and Combating Cybercrime (2015), Papua New Guinea National Cybersecurity Policy & Cybercrime Act (2016). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Awareness Campaign?
Explore our compliance framework pages to see how awareness campaign applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Awareness Campaign applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.