Requirement
In addition to subcontrols in the ECC control 1-10-4, cybersecurity requirements in OT/ICS cybersecurity awareness and training program must include, at a minimum, the following:
Sub-Controls
1-8-2-1
Requirement: customized training, qualifications, knowledge, and professional skillsets must be provided to all personnel with access to the OT/ICS assets. The organization is encouraged to utilize the reference material provided in the Saudi Cybersecurity Workforce Framework (SCyWF).
1-8-2-2
Requirement: Participation in OT/ICS authorized and/or specialized organizations and groups must be encouraged to stay up-to-date on common cybersecurity practices.
References
- ECC – 2:2024 equivalent: 1-10-4
