From the course: ISO 27001:2022-Compliant Cybersecurity: The Annex A Controls
Unlock the full course today
Join today to access over 23,400 courses taught by industry experts.
During employment (Controls 6.3–6.6)
From the course: ISO 27001:2022-Compliant Cybersecurity: The Annex A Controls
During employment (Controls 6.3–6.6)
- [Instructor] If employees and contractors don't know their information security responsibilities while on the job, they can cause serious damage to your organization. ISO 27001 includes four controls designed to ensure that personnel know exactly what they're allowed to do and not allowed to do when it comes to information security. The first control is 6.3, Information Security Awareness, Education, and Training. Here, ISO 27001 requires your organization to provide the appropriate security awareness and training for all employees and contractors relevant to their positions. The purpose of this control is to ensure that personnel are aware of their information security responsibilities and to protect your organization's information from the risks of untrained employees and contractors. Implementation guidance in ISO 27002 recommends developing a security awareness and training program which teaches employees and…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.