Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue AT-02: AT-02 Literacy training and awareness

The organisation provides security and privacy literacy training to all system users, including managers, senior executives and contractors, as part of initial training and at a set frequency thereafter, and when system changes or defined events require; uses defined awareness techniques; updates the content at a set frequency and after defined events; and folds in lessons from internal or external incidents and breaches. The GC discussion requires privacy content covering at least the TBS mandatory procedures for privacy training. 6 enhancements.