Cybersecurity training is provided as a prerequisite to granting access to assets that are important to the delivery of the function

New personnel and personnel transferred into new positions are trained in cybersecurity principles, requirements, and best practices before they are allowed access to IT, OT, and information assets. The training may include cybersecurity training specific to the responsibilities of the position or specific to the assets that will be accessed in the position (such as supply chain security or cloud security training), as well as general cybersecurity training that applies to all personnel.

Related Practices · Input From: Implementing ASSET-1a and ASSET-2a provides input that may be useful for implementing this practice. · Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: WORKFORCE-4a, WORKFORCE-4d, WORKFORCE-4f.