Skip to main content

💼 12.6.3 Personnel receive security awareness training.

Description​

As follows:

  • Upon hire and at least once every 12 months.
  • Multiple methods of communication are used.
  • Personnel acknowledge at least once every 12 months that they have read and understood the information security policy and procedures.

Similar​

  • Sections
    • /frameworks/pci-dss-v4.0/12/06/03

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v4.0 → 💼 12.6.3 Personnel receive security awareness training.2

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v4.0 → 💼 12.6.3 Personnel receive security awareness training.2

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 12.6.3.1 Security awareness training includes awareness of threats and vulnerabilities that could impact the security of the CDE.
💼 12.6.3.2 Security awareness training includes awareness about the acceptable use of end-user technologies.