SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Training & Awareness

12 controles en 4 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0397Executive briefings4 mapeosSenior leadership formally receives regular briefings on the security posture and key risks facing the companyRCF-0391Phishing simulations4 mapeosThe company formally conducts simulated phishing exercises to test and improve employee resilienceRCF-0394Role-based training5 mapeosEmployees with elevated security responsibilities formally receive training tailored to their specific roleRCF-0388Security awareness program4 mapeosThe company formally provides security awareness training to all employees on a regular basis

Proceso

RCF-0398Executive briefings4 mapeosSecurity briefings are consistently delivered to leadership and findings are used to inform strategic decisionsRCF-0392Phishing simulations4 mapeosPhishing simulations are consistently run and employees who fall for them receive immediate targeted trainingRCF-0395Role-based training5 mapeosRole-specific security training is consistently delivered to developers, administrators and other technical staffRCF-0389Security awareness program5 mapeosAll employees consistently complete security awareness training and understanding is verified

Técnica

RCF-0399Executive briefings4 mapeosTechnical dashboards provide leadership with real-time visibility of the organisation's security postureRCF-0393Phishing simulations4 mapeosTechnical tools deliver realistic phishing simulations, measure click rates and automate remediation trainingRCF-0396Role-based training3 mapeosTechnical platforms deliver role-specific security curricula and track completion by job functionRCF-0390Security awareness program3 mapeosTechnical platforms deliver and track security awareness training completion across the workforce

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.6.3 Information security awareness, education and trainingA.8.7 Protection against malwareA.5.4 Management responsibilitiesA.8.16 Monitoring activitiesA.8.15 LoggingA.5.35 Independent review of information securityA.5.2 Information security roles and responsibilities

Esta familia en NIST CSF 2.0

PR.AT-01 General security awareness trainingPR.AT-02 Role-based security trainingGV.RR-01 Leadership accountability for cyber risk

Esta familia en ISO/IEC 42001:2023 — Annex A

A.4.6 Human resourcesA.9.2 Processes for responsible use of AI systems
Pregúntale a Sekura: «¿Qué evidencia demuestra Training & Awareness?»
También vía MCP, gratis con cuenta