12.6.3—Personnel receive security awareness training as follows: Upon hire and at least once every 12 months.

>Requirement Description

Personnel receive security awareness training as follows: Upon hire and at least once every 12 months. Multiple methods of communication are used. Personnel acknowledge at least once every 12 months that they have read and understood the information security policy and procedures.