MOS-05: Awareness and Training
Control Family:
CSF v1.1 References:
PF v1.0 References:
Threats Addressed:
Control is withdrawn in the next version of this control set and incorporated into: UEM-01: Endpoint Devices Policy and Procedures.
Control Statement
The provider shall have a documented mobile device policy that includes a documented definition for mobile devices and the acceptable usage and requirements for all mobile devices. The provider shall post and communicate the policy and requirements through the company’s security awareness and training program.
[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]
Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.