GRCLibrary.ai

Standard

Security Awareness and Training Standard

To ensure that all personnel understand their security obligations, can recognize common attack vectors, and know how to respond. Supports the Information Security Policy and applicable human capital governance.

Type
Standard
Version
1.0.8
Date
2026-09-24
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Information Security
Review frequency
Annual and upon material threat, framework, or regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Governance and accountability
  • 4. Mandatory training requirements
  • 5. Collaboration platform social engineering awareness
  • 6. Phishing simulations
  • 7. Training completion tracking
  • 8. Programme effectiveness
  • 9. Framework alignment

Frameworks it maps to

Related documents