Common use of Security Awareness Training Clause in Contracts

Security Awareness Training. Lattice shall provide annual Security Training to all personnel. “Security Training” shall address security topics to educate users about the importance of information security and safeguards against data loss, misuse or breach through physical, logical and social engineering mechanisms. Training materials should address industry standard topics which include, but are not limited to: • The importance of information security and proper handling of personal information. • Physical controls such as visitor protocols, safeguarding portable devices and proper data destruction. • Logical controls related to strong password selection/best practices. • How to recognize social engineering attacks such as phishing.