Monetary Authority of Singapore Technology Risk Management Guidelines 3.6: 3.6 Security Awareness and Training

A comprehensive IT security awareness training programme should keep all staff highly aware, covering at least the prevailing cyber threat landscape and its implications, the FI's IT security policies and standards, and each person's responsibility to safeguard information assets; all personnel should know the laws, regulations and guidelines on using and accessing information assets. The programme should run at least annually for all staff, contractors and service providers with access to information assets, the board should receive training on technology risks and their management, and the programme should be reviewed periodically against policy changes, emerging risks and the threat landscape.