Annex A 6.3 - Information Security Awareness, Education and Training

Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education, and training and regular updates of the organization's information security policy, topic-specific policies, and procedures, as relevant for their job function.