SAMMY UI is optimized for resolutions with a width 1024px and higher.
CIS Critical Security Controls
Browse CIS Critical...
14,1: Establish and Maintain a Security Awareness Program
14,2: Train Workforce Members to Recognize Social Engineering Attacks
14,3: Train Workforce Members on Authentication Best Practices
14,4: Train Workforce on Data Handling Best Practices
14,5: Train Workforce Members on Causes of Unintentional Data Exposure
14,6: Train Workforce Members on Recognizing and Reporting Security Incidents
14,7: Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
14,8: Train Workforce on the Dangers of Connecting to and Transmitting Enterprise Data Over Insecure Networks
14,9: Conduct Role-Specific Security Awareness and Skills Training
Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
14,7: Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
Policy defined
Not applicable - Not applicable
None - None
Informal - Informal
Partially written - Partially written
Written - Written
Approved and communicated - Approved and communicated
Control implemented
Not applicable - Not applicable
Not implemented - Not implemented
Parts of policy implemented - Parts of policy implemented
Implemented on some systems - Implemented on some systems
Implemented on most systems - Implemented on most systems
Implemented on all systems - Implemented on all systems
Control automated
Not applicable - Not applicable
Not automated - Not automated
Parts of policy automated - Parts of policy automated
Automated on some systems - Automated on some systems
Automated on most systems - Automated on most systems
Automated on all systems - Automated on all systems
Control reported
Not applicable - Not applicable
Not reported - Not reported
Parts of policy reported - Parts of policy reported
Reported on some systems - Reported on some systems
Reported on most systems - Reported on most systems
Reported on all systems - Reported on all systems
Description

Train workforce to understand how to verify and report out-of-date software patches or any failures in automated processes and tools. Part of this training should include notifying IT personnel of any failures in automated processes and tools.