Blog
Which regulations and frameworks require cybersecurity and AI training, what they ask for, and the evidence auditors expect.
-
Which compliance frameworks require security awareness training?
ISO 27001, SOC 2, PCI DSS, HIPAA, NIS2, DORA, NYDFS and more expect staff security training. What each one asks for, and the evidence auditors look for.
-
EU AI Act Article 4: what the AI literacy duty means for your staff
Since February 2, 2025, organizations that provide or use AI systems in the EU must ensure their staff have sufficient AI literacy. What that means in practice.
-
PCI DSS v4.0 requirement 12.6: security awareness training explained
PCI DSS v4.0 requires a formal awareness program, training on hire and every 12 months, and phishing and social engineering content.