Security Awareness Training
What is Security Awareness Training?
Educational programmes designed to teach employees about security risks and best practices. Training covers topics such as phishing recognition, password hygiene, data handling, and incident reporting. Required by ISO 27001, HIPAA, PCI DSS, and NIST CSF.
Terms that appear alongside security awareness training
Each of these is named in at least one of the same controls as security awareness training. The number is how many controls name both.
- security awareness 25 shared controls
- phishing 5 shared controls
- governance 3 shared controls
- nist 3 shared controls
- policy 3 shared controls
- social engineering 3 shared controls
- information security 3 shared controls
- risk assessment 2 shared controls
Frameworks that govern security awareness training
What the standards actually require on security awareness training
Requirements naming security awareness training across 6 standards, quoted from the control text.
A cyber security awareness training register is developed, implemented and maintained.
ISM-2022 · A cyber security awareness training register is developed, implemented and maintained. →Personnel receive security awareness training upon hire and at least once every 12 months, covering threats and vulnerabilities including phishing, social engineering, and acceptable use.
12.6.3 · Security awareness training delivered →Training. Software security awareness training is conducted so developers and stakeholders understand secure development expectations.
T1.1 · Conduct software security awareness training →Run a security awareness training programme for all employees and refresh the training on a regular cycle.
CCM-HRS-11 · Security Awareness Training →Personnel must receive security awareness training appropriate to their role and the entity's membership level.
DISP-PERS-AWARENESS · Security awareness training →Provide CJIS security awareness training to all personnel with access to criminal justice information at hire and at least every two years.
CJIS-5.2 · Security Awareness Training →Questions people ask about security awareness training
What is Security Awareness Training?
Why is Security Awareness Training important for compliance?
Which compliance frameworks address Security Awareness Training?
Where can I learn more about Security Awareness Training?
See how Security Awareness Training applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.