security-policy

Security Awareness Training

Savvi Technologies, Inc. Updated 2023-01-11

Edit this page at https://github.com/savvi-legal/security-policy/blob/main/security-awareness.md.

Training and Policy Enforcement Review

tags: inf_sec_awareness_training

All general trainings shall be recorded for use as part of future employee onboardings.

Training for sections that apply to all employees shall be conducted annually on the 2nd or 3rd Monday of the year, or during the first all-hands company update.

Training for sections specific to Developer and Operations employees shall be conducted on the 4th or 5th Monday of the year, or on the second all-hands company update.

Employees who are not present to take part in the training, either due to being hired after the training period or absence, shall watch the most recently recorded training and shall have any questions or concerns answered as part of onboarding, at latest by the next all-hands company update or the end of the quarter.

End-of-Life evaluations for software and hardware shall be conducted annually in January, before security trainings. End-of-Life devices and software shall be scheduled for replacement at least one year before the projected end-of-life for security updates.

Training Topics

Onboarding

Edit this page at https://github.com/savvi-legal/security-policy/blob/main/security-awareness.md.