Other title: Information Technology Security Awareness and Training; Other title: IT Security Awareness and Training 2100-05

[Updated].; "Revision history: 12/01/2009, New policy for DAS, replaces OIT policy dated 11/02/07; 12/05/2012, Policy reissued under Director Robert Blair; 08/07/2018, Updated the requirements and terminology to align with the current DAS IT security awareness and training process"--Page 4.; "Effective date: 08/07/2018."; Policy number: 2100-05.; Includes bibliographical references.Information technology (IT) security awareness and training are necessary so that users of Ohio Department of Administrative Services (DAS)-managed information systems understand their responsibilities to protect state systems and the information they contain. A glossary of terms found in this policy is located in Section 8.0 Definitions. In addition, references to National Institute of Standards in Technology (NIST) Special Publication (SP) 800-53 family identifiers and control numbers are provided in parentheticals next to requirement headers, where applicable. The scope of this policy includes DAS-managed information systems, service owners, managers of DAS business units, and those who use or administer such systems. This policy is not intended for the general population that accesses State of Ohio government services or applications