Training

Overview

Employee awareness and training is an extremely important foundational part of any cybersecurity strategy. You must ensure that all users who are granted access to the OT communication network for your installation are aware of the corporate security information policy. You must also ensure that they have received adequate training in performing their tasks in compliance with that policy.

In particular, users must be aware, and regularly reminded of best practices concerning:

• Not sharing sensitive information such as passwords or access codes for equipment or for locked rooms

• Keeping PCs safely locked away when not in use

• Ensuring smartphones that can be used to access the system are kept with them at all times and are protected against hacking over Bluetooth wireless technology or over the Internet

• Not circumventing any security polices for reasons of convenience

For further information on designing and implementing a good training policy, refer to How Can I Reduce Vulnerability to Cyber Attacks?.