Run security awareness and phishing tests
Information governance, information security and data protection officer: Run security awareness and phishing tests. Starts when: Training plan cycle. Steps: Assign training; Run a simulated phish; Record click and report rates; Retrain. Done when: Each staff member has a completion date and the results are reported. Rules that apply: NCSC guidance.