Skip to content

Phishing Awareness

What is Phishing Awareness?

Training programs designed to help employees recognize and report phishing attempts through education and simulated phishing exercises.

Information Security

What the standards actually require on phishing awareness

Requirements naming phishing awareness across 2 standards, quoted from the control text.

COBIT 20191 control

Measures that prevent, detect and correct, above all current security patches and virus control, are put in place and kept up throughout the enterprise to shield information systems and technology from malware, ransomware, viruses, worms, spyware and spam: pro...

cobit-2019::DSS05.01 · DSS05.01 Protect against malicious software →

Intermediate control principles for staffing and training (required, with baseline, of an AI whose inherent risk is medium). Leaders of the cybersecurity effort have the right knowledge and experience; cyber staff renew their qualifications periodically;

hkma-cyber-resilience-assessment-framework-c-raf::1.5.I · 1.5 Staffing and training: intermediate level →

Questions people ask about phishing awareness

What is Phishing Awareness?
Training programs designed to help employees recognize and report phishing attempts through education and simulated phishing exercises.
Why is Phishing Awareness important for compliance?
Phishing Awareness is a key concept in Information Security. Understanding phishing awareness helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Phishing Awareness?
Phishing Awareness appears in the requirement text of COBIT 2019, HKMA Cyber Resilience Assessment Framework (C-RAF). Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Phishing Awareness?
Explore our compliance framework pages to see how phishing awareness applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Phishing Awareness applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.