SekitCrosswalk
ENES
Start now
Sekit CSF · Family

Training & Awareness

12 controls in 4 topics, each seen through the policy, process and technical lenses.

Policy

RCF-0397Executive briefings4 mappingsSenior leadership formally receives regular briefings on the security posture and key risks facing the companyRCF-0391Phishing simulations4 mappingsThe company formally conducts simulated phishing exercises to test and improve employee resilienceRCF-0394Role-based training5 mappingsEmployees with elevated security responsibilities formally receive training tailored to their specific roleRCF-0388Security awareness program4 mappingsThe company formally provides security awareness training to all employees on a regular basis

Process

RCF-0398Executive briefings4 mappingsSecurity briefings are consistently delivered to leadership and findings are used to inform strategic decisionsRCF-0392Phishing simulations4 mappingsPhishing simulations are consistently run and employees who fall for them receive immediate targeted trainingRCF-0395Role-based training5 mappingsRole-specific security training is consistently delivered to developers, administrators and other technical staffRCF-0389Security awareness program5 mappingsAll employees consistently complete security awareness training and understanding is verified

Technical

RCF-0399Executive briefings4 mappingsTechnical dashboards provide leadership with real-time visibility of the organisation's security postureRCF-0393Phishing simulations4 mappingsTechnical tools deliver realistic phishing simulations, measure click rates and automate remediation trainingRCF-0396Role-based training3 mappingsTechnical platforms deliver role-specific security curricula and track completion by job functionRCF-0390Security awareness program3 mappingsTechnical platforms deliver and track security awareness training completion across the workforce

This family in ISO/IEC 27001:2022

Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.

A.6.3 Information security awareness, education and trainingA.8.7 Protection against malwareA.5.4 Management responsibilitiesA.8.16 Monitoring activitiesA.8.15 LoggingA.5.35 Independent review of information securityA.5.2 Information security roles and responsibilities

This family in NIST CSF 2.0

PR.AT-01 General security awareness trainingPR.AT-02 Role-based security trainingGV.RR-01 Leadership accountability for cyber risk

This family in ISO/IEC 42001:2023 — Annex A

A.4.6 Human resourcesA.9.2 Processes for responsible use of AI systems
Ask Sekura: “What evidence proves Training & Awareness?”
Also via MCP, free with account