Security Awareness Program
What is Security Awareness Program?
A structured initiative to build and maintain employee knowledge about cybersecurity risks, policies, and best practices through ongoing education.
Frameworks that govern security awareness program
What the standards actually require on security awareness program
Requirements naming security awareness program across 3 standards, quoted from the control text.
A formal security awareness program must be in place so that all personnel know the entity's security policy and its procedures, and understand their own part in protecting cardholder data.
12.6.1 · 12.6.1 Formal security awareness program →Set up and keep a security awareness programme whose aim is to teach the workforce how to use enterprise assets and data securely. Train people when they are hired and at least yearly after that.
CIS-14.1 · Establish and Maintain a Security Awareness Program →Run and maintain a security awareness programme that teaches the workforce how to work with enterprise assets and data securely. Train people when they join and at least every year, and refresh the content yearly or after significant change.
cis-controls-v8-1::14.1 · Establish and Maintain a Security Awareness Program →Questions people ask about security awareness program
What is Security Awareness Program?
Why is Security Awareness Program important for compliance?
Which compliance frameworks address Security Awareness Program?
Where can I learn more about Security Awareness Program?
See how Security Awareness Program applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.