AT-1: Policy and Procedures

personnel or roles to whom the awareness and training policy is to be disseminated is/are defined;

personnel or roles to whom the awareness and training procedures are to be disseminated is/are defined;

events that would require the current awareness and training policy to be reviewed and updated are defined;

events that would require procedures to be reviewed and updated are defined;

an official to manage the awareness and training policy and procedures is defined;

the frequency at which the current awareness and training policy is reviewed and updated is defined;

the frequency at which the current awareness and training procedures are reviewed and updated is defined;