MOS-05: Awareness and Training

Control Family:

Mobile Security

CSF v1.1 References:

PF v1.0 References:

Control Statement

The provider shall have a documented mobile device policy that includes a documented definition for mobile devices and the acceptable usage and requirements for all mobile devices. The provider shall post and communicate the policy and requirements through the company’s security awareness and training program.