Cybersecurity Training and Awareness Program

• Table of Contents

  • EDC Inc Cybersecurity Training and Awareness Program Policy
  • 1. Policy Statement
  • 2. Scope
  • 3. Responsibilities
  • 4. Cybersecurity Training
  • 5. Cybersecurity Awareness
  • 6. Compliance
  • 7. Review and Update
  • 8. Contact
  • Summary

EDC Inc Cybersecurity Training and Awareness Program Policy

This policy outlines the requirements and guidelines for the Cybersecurity Training and Awareness Program at EDC Inc. The policy aims to ensure that all employees are aware of their roles and responsibilities in protecting the organization’s information assets.

1. Policy Statement

EDC Inc is committed to protecting its information assets and systems from cyber threats. To achieve this, EDC Inc requires all employees to complete mandatory cybersecurity training and awareness programs. This policy outlines the requirements for these programs.

2. Scope

This policy applies to all EDC Inc employees, contractors, and third-party users who have access to EDC Inc’s information systems and networks.

3. Responsibilities

• The IT Security Operations department is responsible for developing and implementing the Cybersecurity Training and Awareness Program.
• The IT Audit and Compliance department is responsible for ensuring compliance with this policy.
• All EDC Inc employees, contractors, and third-party users are responsible for completing the required training and adhering to the guidelines outlined in this policy.

4. Cybersecurity Training

All EDC Inc employees, contractors, and third-party users must complete mandatory cybersecurity training upon induction and annually thereafter. The training will cover topics such as:

• Understanding cyber threats and risks
• Safe use of EDC Inc’s information systems and networks
• Responsibilities under this policy and other relevant EDC Inc policies
• Procedures for reporting suspected cybersecurity incidents

5. Cybersecurity Awareness

The IT Security Operations department will provide ongoing cybersecurity awareness information to all EDC Inc employees, contractors, and third-party users. This may include:

• Regular updates on new and emerging cyber threats
• Tips and advice on how to stay safe online
• Information on EDC Inc’s cybersecurity policies and procedures

6. Compliance

Failure to comply with this policy may result in disciplinary action, up to and including termination of employment or contract. Any suspected non-compliance should be reported to the IT Audit and Compliance department.

7. Review and Update

This policy will be reviewed and updated annually by the IT Security Operations department, or more frequently if necessary, to ensure it remains relevant and effective.

8. Contact

For any queries or concerns related to this policy, please contact the IT Security Operations department.

Summary

EDC Inc’s Cybersecurity Training and Awareness Program Policy is designed to ensure that all employees, contractors, and third-party users understand their roles and responsibilities in protecting the organization’s information assets. The policy requires mandatory cybersecurity training and provides for ongoing cybersecurity awareness information. Compliance with this policy is mandatory and non-compliance may result in disciplinary action.

91 comments