Security Awareness and Training

The next section under the Administrative Rules is Security Awareness and Training. Agencies must implement a security awareness and training program for all members of the workforce including management.

There are 4 tasks under this section. The first is to create a process for periodically distributing information regarding security issues to the workforce. This is an addressable task. Methods can include formal training sessions, email alerts and reminders, Intranet messages, posters, meetings, etc.