FBI CJIS Security Policy CJIS-2: Security Awareness Training

What else in your programme already covers this

This control maps to 37 controls across 29 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

CPG-1.C Unique Credentials
CPG-4.C Basic Cybersecurity Training

Secure by Design: A Guide for Manufacturers (CISA) · 2 controls

CISABD-3 Build Organizational Structure and Leadership for Secure Outcomes
SBD-DEV-04 Phishing-Resistant Authentication

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-37 Personnel management (Very Good)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-1.3 Security Awareness and Training

FDA 21 CFR Part 11 · 1 control

Part11.10 Controls for closed systems (21 CFR §11.10)

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D1-4 Training and culture

FIRST CSIRT Services Framework and Standards · 1 control

FIRST-CSIRTF-SA5-KnowledgeTransfer Service Area 5 - Knowledge Transfer (Awareness, Training, Exercises, Advisory)

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g))

HKMA Cyber Resilience Assessment Framework (C-RAF) · 1 control

HKMA-CRAF-Domain3-4-Protection-Detection HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel

IATA Operational Safety Audit (IOSA) Standards Manual · 1 control

IATA-IOSA-Section8-SEC-SecurityManagement-AVSEC IATA IOSA Section 8 - SEC Security Management + Aviation Security Programme (AVSEC) + ICAO Annex 17 Alignment

IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2) · 1 control

IMO-MSC-FAL-Protect-AccessControl-NetworkSegmentation-MalwareDefence-Patch-Awareness-DataSecurity IMO MSC-FAL Protect Function - Access Control + Network Segmentation + Malware Defence + Patch Management + Awareness Training + Data Security + Crew BYOD + Removable Media

ISO 13485 · 1 control

ISO13485-09 Security awareness and training program

ISO 27799 · 1 control

ISO27799-09 Security awareness and training program

ISO 28001:2007 Supply Chain Security Management · 1 control

ISO28001-PI-02 Security Awareness and Training

ISO/IEC 27011:2024 · 1 control

27011-6.3 Awareness and Training

MARS-E · 1 control

MARS-E-Privacy-PII-PHI-Minimum-Necessary-HIPAA-Privacy-Rule-NIST-800-122-45-CFR-164-Subpart-E MARS-E Privacy + PII + PHI + Minimum Necessary + HIPAA Privacy Rule + NIST 800-122 + 45 CFR 164 Subpart E

MDS2 (Medical Device) · 1 control

MDS2-Roadmap-Third-Party-RDMP-Security-Guidance-SGUD-SBOM-Vulnerability-Disclosure-Programme MDS2 Roadmap + RDMP + Third Party + Security Guidance + SGUD + SBOM + Vulnerability Disclosure + Coordinated

NIST Privacy Framework · 1 control

NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 1 control

3.2.1 Account data storage is kept to a minimum through implementation of data retention and disposal policies, procedures, and processes that include at least the following: • Coverage for all locations of stored account data.

NIST SP 800-66 · 1 control

NISTSP66-2 Workforce Security, Information Access Management, and Awareness Training

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 1 control

NISTSP82-1 OT Security Program Governance, Policy, Roles, and Safety-Security Integration

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

RG5.71-C.3 Cyber Security Training

New Zealand Information Security Manual (NZISM) · 1 control

NZISM-1 NZISM Governance, Documentation, and Classification System

OWASP DevSecOps Maturity Model (DSOMM) · 1 control

DSOMM-1 Culture, Organization, Education, and Governance

Oman National Cybersecurity Framework · 1 control

OMANCS-8 Third-Party + Supply Chain Risk, Awareness Training, Physical Security, Compliance Audit

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 1 control

PASONE-3 Personnel Security, Vetting, Awareness, and Training

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

GT-4 Social Engineering Attacks

TISAX - Trusted Information Security Assessment Exchange · 1 control

TISAX-ISM-03 Human Resources Security

UK Gambling Commission - Cyber Resilience Requirements · 1 control

UKGAMBLE-4 Resilience and Incident Response

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.