Rev. 3 awareness and training requirements: security literacy training for all users, including insider threat and social engineering, and role-based training for personnel with security duties.
Security literacy training for all system users at onboarding, at a defined frequency and after defined events, including recognizing and reporting insider threat, social engineering and social mining, with content updated on schedule. Rev. 3 folded Rev. 2's insider threat requirement (3.2.3) into it.
Role-based security training for personnel with assigned security duties, given before they get access or perform duties, at a defined frequency afterwards and after system changes or defined events, with content kept current.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.