Phishing Awareness and Training Policy

Description

The Phishing Awareness & Training Policy establishes the requirements for educating workforce members on recognizing, preventing, and reporting phishing and other social engineering attacks. It defines organizational responsibilities, training requirements, reporting procedures, and security controls designed to reduce the risk of credential compromise, malware infections, data breaches, and financial fraud. This policy promotes a security-conscious culture and supports compliance with applicable regulatory and industry standards.