Name/Id: ACF1091 / Microsoft Managed Control 1091 Category: Awareness and Training Title: Security Awareness Training - Training on Defined Frequency Ownership: Customer, Microsoft Description: The organization provides basic security awareness training to information system users (including managers, senior executives, and contractors): Annually thereafter. Requirements: The annual security foundations training includes basic level training on how to detect, report and implement best practices to safeguard Microsoft and its customers. This course also covers the security requirements and expectations for elevated privileges in production environments. Engineering personnel participate in ongoing role-based security training through the STRIKE program. STRIKE provides regular 200-400 level sessions, labs, online courses, and materials to engage, educate and empower engineers to securely design and operate services. The C+AI Security Education and Awareness program provides additional training through security awareness campaigns.
The following 1 compliance controls are associated with this Policy definition 'Microsoft Managed Control 1091 - Security Awareness' (b23bd715-5d1c-4e5c-9759-9cbdf79ded9d)
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators: <, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx: Learn more
Essential and important entities should adopt a wide range of basic cyber hygiene practices, such as zero-trust principles, software updates, device configuration, network segmentation, identity and access management or user awareness, organise training for their staff and raise awareness concerning cyber threats, phishing or social engineering techniques.
Cyber hygiene policies provide the foundations for protecting network and information system infrastructures, hardware, software and online application security, and business or end-user data upon which entities rely. Cyber hygiene policies comprising a common baseline set of practices, including software and hardware updates, password changes, the management of new installs, the limitation of administrator-level access accounts, and the backing-up of data, enable a proactive framework of preparedness and overall safety and security in the event of incidents or cyber threats. ENISA should monitor and analyse Member States’ cyber hygiene policies.
8
No results
Initiatives usage
Rows: 1-1 / 1
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators: <, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx: Learn more