17.3: Implement a Security Awareness Program

CSF v1.1 References:

PF v1.0 References:

Group:

Info icon.

The next version of the control set incorporates all or part of this control into: 14.1: Establish and Maintain a Security Awareness Program.

Control Statement

Create a security awareness program for all workforce members to complete on a regular basis to ensure they understand and exhibit the necessary behaviors and skills to help ensure the security of the organization. The organization’s security awareness program should be communicated in a continuous and engaging manner.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]