Cybersecurity Awareness (NIST SP 800-50) FoundationOverview According to ISO IEC 27002: 2022 personnel of the organization and relevant interested parties should receive appropriate cybersecurity awareness, education and training and regular updates of the organization's information security policy, topic specific policies and procedures, as relevant for their job function. An information security awareness programme should aim to make personnel aware of their responsibilities for information security