HRM-INT-02Term
Awareness training
The baseline cybersecurity training delivered to all personnel on a fixed cadence, at hire and at least annually. It builds security awareness and yields a completion rate.
Example
A people operations lead assigns the annual course to every employee and tracks completion before the audit.
Also called
4How analysts, standards and vendors name the same idea.
- awareness trainingNIST SP 800-50r1Called literacy training in the SP 800-53r5 Awareness and Training (AT) control family.
- security awareness programCIS Controls v8.114.1: at hire and, at a minimum, annually.
- compliance trainingKnowBe4
- Compliance FocusedSANSMaturity level 2: meeting minimum training requirements.
Sources
5Related terms
5"Awareness training" (HRM-INT-02), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/awareness-training
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.