HRM-INT-03Term
Role-based training
Training scoped to a defined work role and the risks that role carries: payment approvers, administrators, help-desk staff, developers. It starts by naming the roles and the people in them.
Example
A help-desk manager puts every agent through a pretexting module and a voice simulation before they can reset MFA for others.
Also called
4How analysts, standards and vendors name the same idea.
- role-based trainingNIST SP 800-50r1Begins with defining the significant work roles and identifying the personnel aligned to them.
- role-specific security awareness and skills trainingCIS Controls v8.114.9, IG2 and IG3 only.
- PR.AT-02NIST CSF 2.0Individuals in specialized roles are provided with awareness and training.
- A.6.3ISO/IEC 27001:2022Training as relevant for the job function.
Sources
4Related terms
3"Role-based training" (HRM-INT-03), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/terms/role-based-training
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.