Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Cybersecurity Awareness and Training Programs

Give the entity's personnel the security awareness they need to know and carry out their cybersecurity responsibilities.

1-5-1

[A: M | B: R] Cybersecurity awareness programs must cover the key cybersecurity topics important for protecting the entity from cyber threats (e.g., phishing, ransomware, strong passwords, social-media best practices, and reporting incidents and suspicious behavior), and must be tailored to employees' duties and needs.
1-5-2

[A: M | B: R] The entity's approved cybersecurity awareness programs must be implemented.
1-5-3

[A: M | B: R] The entity's approved cybersecurity awareness programs must be reviewed periodically.

Need help putting this into practice? See our NCA NCNICC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.