HRM-GOV-14Term
Learning program
The managed set of awareness, role-based and reinforcement activities, with a strategic plan, an owner and a budget, that an organization runs to reduce risk through education. NIST calls the federal version a Cybersecurity and Privacy Learning Program.
Example
A learning program manager publishes the year’s plan: baseline training, three role tracks and monthly simulations.
Also called
3How analysts, standards and vendors name the same idea.
- Cybersecurity and Privacy Learning Program (CPLP)NIST SP 800-50r1A life cycle approach that should encourage behavior change as part of risk management.
- learning programNIST SP 800-50r1Led by learning program managers who develop a strategic plan to deliver a right-sized program.
- security awareness programCIS Controls v8.114.1.
Sources
2Related terms
4"Learning program" (HRM-GOV-14), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/learning-program
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.