Protect 2.3.2 Awareness and training Ensure that your staff and external partners receive appropriate, regular training on all cybersecurity matters. Ensure that your staff and external partners perform their security-related tasks in accordance with the related requirements and procedures. Description Task PR.AT-1 Ensure that all members of staff are informed and trained on cybersecurity. PR.AT-2 Ensure that higher-level users are particularly aware of their role and responsibility. PR.AT-3 Ensure that all third-party stakeholders (suppliers, customers and partners) are aware of their role and responsibility. PR.AT-4 Ensure that all managers are aware of their particular role and responsibility. PR.AT-5 Ensure that those in charge of physical security and information security are aware of their particular role and responsibility. Table 17: PR.AT tasks Standard Reference COBIT 5 APO07.03, BAI05.07, APO07.02, DSS06.03, APO07.03, APO10.04, APO10.05 ISA 62443-3:2013 4.3.2.4.2, 4.3.2.4.3 ISO 27001:2013 A.7.2.2, A.6.1.1 NIST-SP-800-53 Rev. 4 AT-2, AT-3, PM-13, PS-7, SA-9, AT-3, PM-7 BSI M 2.193, B 1.13 Table 18: PR.AT references Minimum ICT standard 2018 22