ASD Essentials for Enterprise IT PRO-14: Cyber security awareness training: role-tailored before access, updated regularly for current threats

What does PRO-14 require?

Nobody receives access to systems or data before completing security awareness training shaped to how their role will touch systems, applications and data, and the training is refreshed regularly so it reflects today's threats and operating realities. Marked for every technical domain.

Maintained by Gerard Blokdyk

Other controls in Capability domain: Governance and culture – ASD Essentials for Enterprise IT

GOV-01 Executive cyber security accountability: define board and executive accountabilities, risk appetite and a review cadence
GOV-03 Security risk management assurance: maintain a risk management methodology and plan
GOV-04 Cyber security resourcing: assign skilled personnel, define responsibilities in roles and review resourcing periodically
GOV-08 Executive accountability for artificial intelligence use, governance and risk
GOV-11 Supplier cyber security assurance: risk-assess suppliers proportionately, retain evidence and keep assurance current
GOV-14 Legacy system management: identify, assess and treat the risks of legacy and unsupported technologies until removed

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ASD Essentials for Enterprise IT controls