Describes how an effective awareness and training programme for information security is built and maintained, so that staff perceive security risks more sharply and gain the knowledge and skills for security-conscious behaviour. In Edition 2023 the Baustein carries 9 requirement numbers, 7 of them live: 2 Basis requirements (B, MUSS, to be fulfilled first and without exception), 4 Standard requirements (S, SOLLTE) and 1 requirements for elevated protection needs (H), with 2 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as ORP.3.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.