From 7487493560cd9f963eff12394c5d6b14f9f10d11 Mon Sep 17 00:00:00 2001 From: gearnode Date: Mon, 13 Jan 2025 15:33:51 +0100 Subject: [PATCH] Add train your employees on security Signed-off-by: gearnode --- ...OPS.TRN.001_security_awareness_training.md | 42 +++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 controls/operations/training/OPS.TRN.001_security_awareness_training.md diff --git a/controls/operations/training/OPS.TRN.001_security_awareness_training.md b/controls/operations/training/OPS.TRN.001_security_awareness_training.md new file mode 100644 index 000000000..c83761365 --- /dev/null +++ b/controls/operations/training/OPS.TRN.001_security_awareness_training.md @@ -0,0 +1,42 @@ +--- +id: "OPS.TRN-001" +category: "operations/training" +revision-version: 1 +revision-date: "2024-01-13" +estimate-time: "30m" +frameworks: + - name: "soc2" + sections: ["CC1.4", "CC2.2"] +--- + +## Purpose + +Your employees are the main target of cyber threats (especially phishing and +social engineering), and education is one of the best way to reduce risk. +Awareness of your employees will improve your company security. + +## Implementation + +There are a few options on the market, we will guide you through +[Riot](https://tryriot.com/fr/) setup. + +### Riot + +1. **Sign up:** Go to the Riot website ([tryriot.com](https://tryriot.com/)) and + either start a free trial or book a demo to get your account set up. + +2. **Install on slack**: If you’re using Slack, you can install Riot directly + from the [Slack Marketplace](https://slack.com/apps/A01GSNM2H6V-riot). + +3. **Set up phishing simulations and security training**: After installation, + you can begin running phishing simulations to test your team’s readiness + against attacks. You can also automate ongoing security training programs + that run throughout the year to keep employees aware of best practices. + +4. **Monitor and Track Progress**: Once the setup is complete, you can track + your team's engagement and security posture through Riot’s dashboard, which + allows you to monitor progress and export compliance reports as needed. + +## Evidence + +- Screenshot of your program in Riot with completion.