AWARENESS AND TRAINING
27.1 Objective
The objective of this Policy is to educate and train users effectively and efficiently using applications and technology solutions to ensure user compliance with policies and procedures.
27.2 Policy
a) Establish and regularly update a curriculum for each target group of employees considering:
(i) Current and future business needs and strategies
(ii) Value of information as an asset
(iii) Corporate values (ethical values, control and security culture, etc.)
(iv) Implementation of new IT infrastructure and software (i.e., packages, applications)
(v) Current and future skills, competency profiles, and certification and/or credentialing needs as well as required reaccreditation
(vi) Delivery methods (e.g., classroom, web-based), target group size, accessibility and timing