Competence
7.2
-
Last updated
Mandatory
Catalog reference
Determine the competence needed for people whose work affects information security performance, ensure they are competent through education, training, or experience, and retain evidence of it.
Narrative — how we satisfy this requirement
The Roles register states what each Role needs to know, and the HR Lead keeps the training records. Engineers also take the course on secure administration of customer systems.
Review
On trackNext review is 11/1/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due