New Zealand Information Security Manual (NZISM) 9.1.6.C.01: 9.1.6.C.01 Tailor awareness training to user responsibilities

Agencies should match the level of detail, the content and the breadth of their information security awareness and training programmes to the responsibilities that system users hold.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Chapter 9: Personnel Security – New Zealand Information Security Manual (NZISM)

9.1.4.C.01 9.1.4.C.01 Management ensures system users are trained and security aware
9.1.5.C.01 9.1.5.C.01 Ongoing security awareness and training programme for personnel
9.1.5.C.02 9.1.5.C.02 Security awareness training included in staff induction
9.1.6.C.02 9.1.6.C.02 Required topics in security awareness and training content
9.1.6.C.03 9.1.6.C.03 Training warns users against prohibited system actions
9.1.7.C.01 9.1.7.C.01 TOP SECRET familiarisation training before unsupervised access
9.1.8.C.01 9.1.8.C.01 Caution staff on courses attended with non-government people
9.2.10.C.01 9.2.10.C.01 SSP specifies authorisations, clearances and briefings for access

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All New Zealand Information Security Manual (NZISM) controls