Information Security Awareness and Training: Difference between revisions

Line 52: Line 52:
*Unscheduled awareness assessments periodically to assure compliance with the training.   
*Unscheduled awareness assessments periodically to assure compliance with the training.   
*Feedback surveys to improve the security awareness and training program.
*Feedback surveys to improve the security awareness and training program.
A record of training completion and results of assessments will be maintained for each member of the workforce.  For employees, the record will be maintained in the personnel files by Human Resources, as part of the permanent record. Records for faculty, volunteers, students, trainees and others will be maintained by the responsible administrative department.
A record of training completion and results of assessments will be maintained for each member of the workforce.  For employees, the record will be maintained in the personnel files by the Compliance Office, as part of the permanent record. Records for faculty, volunteers, students, trainees and others will be maintained by the responsible administrative department.
 
==Compliance==
==Compliance==
Failure to comply with this policy by employees will be subject to UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy].  Legal action may be taken for violations of any applicable law.
Failure to comply with this policy by employees will be subject to UNMC Policy 1098, [https://wiki.unmc.edu/index.php/Corrective/Disciplinary_Action Corrective and Disciplinary Action Policy].  Legal action may be taken for violations of any applicable law.