Training & Awareness

 
 

2. Training

Have Technical Owners and IT Support staff involved in supporting systems for, and employed by, the unit I represent have completed Privacy & Information Security – IT Professionals training?

Note: the scope of this question is IT support staff within the unit. UBCIT professionals supporting the unit should not be considered for this question.

Why is this control essential?

All employees of UBC, where relevant, contractors and third party users shall receive appropriate awareness training and regular updates in organizational policies and procedures, as relevant for their job function.

Information security is everyone's responsibility. User and IT professional training provide people with the information they need to protect UBC information and systems. People are often considered information securities weakest link.

Reference Links​

Policy SC14 - Acceptable Use and Security of UBC Electronic Information and Systems
Privacy Matters @UBC – Training

Instructions​

Privacy & Information Security – IT Professionals training is a mandatory requirement for faculty, staff, researchers, student employees and contractors who are Technical Owners of UBC systems and University IT Support Staff.​

A complete report can be generated by following the self-help instructions below.
How to Create Privacy Course Reports

In some cases employees are not identified in Workday, therefore the IT Representative should take the necessary steps to ensure all the professionals carrying an IT-related function take the training. The Administrative Head of Unit and the IT Representative are strongly encouraged to generate and evaluate reports for accuracy. Please reach out to "UBC PrISM Compliance " if any questions. Further instructions and the link to the training can be found here: Privacy & Information Security - IT Professionals

What is Acceptable?

We understand that there may be staff in various situations, such as on leave, or just starting. If your unit's completion rate is 85% or above, you can answer "Yes" to this question.

The goal in this control is to reach as close to 100% completion as soon as possible and continue to review training completion on an ongoing basis.

 
 
 

---