ISO 27001 6.3 Information Security Awareness, Education and Training Requirement:
"Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education and training and regular updates of the organization's information security policy, topic-specific policies and procedures, as relevant for their job function."[1]
ISO 27001 6.3 Information Security Awareness, Education and Training Requirement Explanation:
Security awareness training helps personnel identify and avoid security threats. It also informs them of the organization's security policies as well as how to report incidents. Security training can be provided using e-learning courses or class training.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you