CIS Controls Security Awareness Training | Huntress

This document summarizes CIS Control 14 (Security Awareness Training), advising organizations to establish and maintain a continuous, role-based security awareness program to reduce human-related cyber risk. It enumerates requirements (14.1–14.9) including performing a skills gap analysis, delivering targeted training, implementing a continuous awareness program, updating content frequently, and training on secure authentication, social engineering, sensitive data handling, causes of unintentional data exposure, and incident identification and reporting, and recommends ongoing topical communications and phishing simulations.