Annex A 6.4 - Disciplinary Process

Personnel of the organization and relevant interested parties shall receive appropriate information security awareness, education, and training and regular updates of the organization's information security policy, topic-specific policies, and procedures, as relevant for their job function.