View source for DS7.2:

'''DS 7.2 Delivery of Training and Education '''<br>
<br>
'''Control Objective:'''<br>
<br>Based on the identified education and training needs, identify target groups and their members, efficient delivery mechanisms, teachers, trainers and mentors. Appoint trainers and organize training sessions on a timely basis. Registration (including prerequisites), attendance and performance evaluations should be recorded. 
<br>
:: Sarbanes-Oxley
:: HIPAA
:: GLBA
:: PCI
:: FISMA
:: NIST SP 800-66
:: Ditscap
:: Control Exception
:: User Defined
<br>
'''Risk Association Control Activities:'''<br>
<br>
'''Implementation Guide:'''<br>
<br>
'''Process Narrative'''<br>
Insert a description of the process narration that is applicable to the existing control statement this narrative refers to.<br>
<br>
'''Process Illustration'''<br>
Insert a process diagram, flowchart or other visual representation here to illustrate the process narrative.<br>
<br>
[[Image:someimage.jpg]]<br>
<br> 
'''Control Commentary'''<br>
Insert a description of the control that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Control Exception Commentary'''<br>
Insert a description of the control exception that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Evidence Archive Location'''<br>
Insert Evidence Description Here.<br> 
<br>
'''Control Status and Auditors Commentary'''<br>
Describe the condition of the applicable control and its effectiveness. Set the color icon to a redlock.jpg, yellowlock.jpg or greenlock.jpg.<br>
<br>
[[Image:redlock.jpg]]<br>
<br>
'''Remediation Plan'''<br>
Insert remediation plan, applicability, or any information that indicates what needs to be done.<br>
<br>
'''Control Objective:'''<br>
<br>Based on the identified education and training needs, identify target groups and their members, efficient delivery mechanisms, teachers, trainers and mentors. Appoint trainers and organize training sessions on a timely basis. Registration (including prerequisites), attendance and performance evaluations should be recorded. 
<br>
:: Sarbanes-Oxley
:: HIPAA
:: GLBA
:: PCI
:: FISMA
:: NIST SP 800-66
:: Ditscap
:: Control Exception
:: User Defined
<br>
'''Risk Association Control Activities:'''<br>
<br>
'''Implementation Guide:'''<br>
<br>
'''Process Narrative'''<br>
Insert a description of the process narration that is applicable to the existing control statement this narrative refers to.<br>
<br>
'''Process Illustration'''<br>
Insert a process diagram, flowchart or other visual representation here to illustrate the process narrative.<br>
<br>
[[Image:someimage.jpg]]<br>
<br> 
'''Control Commentary'''<br>
Insert a description of the control that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Control Exception Commentary'''<br>
Insert a description of the control exception that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Evidence Archive Location'''<br>
Insert Evidence Description Here.<br> 
<br>
'''Control Status and Auditors Commentary'''<br>
Describe the condition of the applicable control and its effectiveness. Set the color icon to a redlock.jpg, yellowlock.jpg or greenlock.jpg.<br>
<br>
[[Image:redlock.jpg]]<br>
<br>
'''Remediation Plan'''<br>
Insert remediation plan, applicability, or any information that indicates what needs to be done.<br>
<br>
'''Supplemental Information:'''<br>
ITIL Security Management<br>
ITIL Security Management Measures<br>
ITIL 4.2 Implementation<br>
<br>
ISO 6.2 User training<br>
ISO 6.3 Responding to security incidents and malfunctions<br> 
ISO 8.3 Protection against malicious software <br>
ISO 9.3 User responsibilities<br>
ISO 3.1 Information security policy <br>
ISO 4.1 Information security infrastructure<br> 
ISO 9.8 Mobile computing and teleworking <br>
ISO 12.1 Compliance with legal requirements