CIP Security Awareness and Training: Standards and Practice
Rafał Leszczyna · 2016
These are critical infrastructure employees who have access to the critical cyber assets in the first place. This situation is well recognised by international and national standardisation bodies which recommend security education, training and awareness as one of the key elements of critical infrastructure protection. In this chapter the standards are identified and their relevant areas are described. A practical implementation of the recommendations by means of a university course is presented.