Sekit CSF · Training & Awareness · Policy

RCF-0388Security awareness program

The company formally provides security awareness training to all employees on a regular basis

Mapping at a glance

RCF-0388Security awareness programTraining & Awareness · Policy

A.6.3Information security awareness, education and trainingISO/IEC 27001:2022 · Annex A controls PR.AT-01General security awareness trainingNIST CSF 2.0 PR.AT-02Role-based security trainingNIST CSF 2.0 A.4.6Human resourcesISO/IEC 42001:2023 — Annex A

RCF-0388 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.6.3Information security awareness, education and trainingsupportsThis policy control establishes mandatory security awareness training at onboarding and annually thereafter, supporting A.6.3's training requirement alongside the completion tracking and role-based training the other Sekit controls provide.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AT-01General security awareness training PR.AT-02Role-based security training

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.4.6Human resourcessupportsThe security awareness training policy commits every employee to regular training, but it names no AI-specific content, so it only partly covers the AI competence obligation.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Security awareness training records

The proof that employees receive regular security training and complete it, including role-specific training.

From the Sekit evidence catalog

This topic through the other lenses

All Training & Awareness controls

Ask Sekura: “What evidence proves RCF-0388?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.