3.2.3
3.2.3
Provide security awareness training on recognizing and reporting potential indicators of insider threat.
-
4.3.2.1 The organization shall train employees on basic security practices, including a focus on the following practical and easily implementable measures:
a. The use of effective password policies (see Subsection 5.5);
b. Identification of malicious emails and links;
c. Use of approved software;
d. Appropriate usage of the Internet; and
e. Safe use of social media;4.3.3.1 The organization shall invest in regular and ongoing cyber security awareness and training for their employees.