Requirement
[A: M | B: R] Cybersecurity awareness programs must cover the key cybersecurity topics important for protecting the entity from cyber threats (e.g., phishing, ransomware, strong passwords, social-media best practices, and reporting incidents and suspicious behavior), and must be tailored to employees' duties and needs.
