Article 13
|
- An organization shall ensure the original responsible person of the core system and their agent are capable, competent and are provided with sufficient trainings. Aspects and contents of trainings can include but not limited to recognition trainings, business continuity, most current relevant trends, backup technology trainings, succession of experiences from the exercise, relevant recent internal and external business continuity cases, changes to information and communication system structures, etc.
- An organization shall fully record the results of staff training and regularly examine the staff’s recognition level, capabilities and appropriateness of training contents.
|