Reference no: EM132570841

Creating a security training and awareness plan

Introduction
This document presents a Security Training and Awareness Plan for BigIns, a global Insurance company headquartered in the European Union and employing around 100'000 staff around the world.

Background

As a global company operating in a highly regulated industry, we have a set of obligations to our employees, our shareholders and to our customers focused on protecting their information and our ability to serve and support them. We recognise that to be able to provide that protection, we must support our staff to maintain a high level of knowledge and awareness of the security challenges they are likely to confront in their daily work.

In addition, as a provider of financial services, BigIns has an obligation to meet PCI DSS Requirement 12.6 to implement aformal security awareness program.

This document describes the BigIns Security Training and Awareness Plan

REQUIREMENT

ANSWER THE FOLLOWING POINTS:

1. Security Awareness Team

2. Roles and Responsibilities

3. Training and Awareness Targets

4. Channels for developing Security Awareness

The following channels have been defined for delivering security awareness training within BigIns:

examples could include webinars, seminars, online on-demand training, Management presentations, New-hire on-boarding, etc.

Security Awareness Objectives by Role
While a minimum level of security awareness is expected from all employees, certain roles are more exposed and present additional requirements, either because they are more exposed than others or because the impact of their actions may be especially significant.

5 All Staff