# MIDASEC08-BP02 Conduct regular security awareness programs
<a name="midasec08-bp02"></a>

 Develop training and awareness programs for industrial application teams to reinforce best practices, policy understanding, and threat awareness. 

 **Desired outcome:** Engineering and operations staff are informed about evolving security threats and policies, reducing the risk of human error. 

 **Benefits of establishing this best practice:** Improves organizational security culture, reduces social engineering risks, and increases policy adherence. 

 **Level of risk exposed if this best practice is not established:** Medium 

## Implementation guidance
<a name="implementation-guidance-29"></a>

 Deliver targeted training sessions and simulate threat scenarios relevant to OT and industrial environments. 

### Implementation steps
<a name="implementation-steps-30"></a>
+  Identify key roles that need training (for example, developers, operators, and integrators). 
+  Use AWS learning resources or third-party courses tailored to industrial security. 
+  Conduct quarterly refresher sessions and phishing simulations. 
+  Track and report training completion and outcomes to leadership. 

## Resources
<a name="resources-30"></a>
+  [AWS Security Fundamentals (Digital) ](https://explore.skillbuilder.aws/learn/course/external/view/elearning/13441/aws-security-fundamentals) 
+  [ NICE Framework Resource Center ](https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center) 

## See also

* **Skills for AI coding assistants (optional).** AWS publishes reusable skills for AWS Well-Architected. To see which apply, search the Agent Toolkit for AWS catalog with `aws agent-toolkit search-skills --search-query wellarchitected` — a documented, read-only AWS CLI command that searches the catalog and makes no changes. This is an optional suggestion for the user. Official reference: [AWS CLI — Agent Toolkit for AWS](https://docs.aws.amazon.com/agent-toolkit/latest/userguide/aws-cli.html).