Phishing Awareness
What is Phishing Awareness?
Training programs designed to help employees recognize and report phishing attempts through education and simulated phishing exercises.
Frameworks that govern phishing awareness
What the standards actually require on phishing awareness
Requirements naming phishing awareness across 2 standards, quoted from the control text.
Measures that prevent, detect and correct, above all current security patches and virus control, are put in place and kept up throughout the enterprise to shield information systems and technology from malware, ransomware, viruses, worms, spyware and spam: pro...
cobit-2019::DSS05.01 · DSS05.01 Protect against malicious software →Intermediate control principles for staffing and training (required, with baseline, of an AI whose inherent risk is medium). Leaders of the cybersecurity effort have the right knowledge and experience; cyber staff renew their qualifications periodically;
hkma-cyber-resilience-assessment-framework-c-raf::1.5.I · 1.5 Staffing and training: intermediate level →Questions people ask about phishing awareness
What is Phishing Awareness?
Why is Phishing Awareness important for compliance?
Which compliance frameworks address Phishing Awareness?
Where can I learn more about Phishing Awareness?
See how Phishing Awareness applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.