# MIDASEC08-BP02 Conduct regular security awareness programs
<a name="midasec08-bp02"></a>

 Develop training and awareness programs for industrial application teams to reinforce best practices, policy understanding, and threat awareness. 

 **Desired outcome:** Engineering and operations staff are informed about evolving security threats and policies, reducing the risk of human error. 

 **Benefits of establishing this best practice:** Improves organizational security culture, reduces social engineering risks, and increases policy adherence. 

 **Level of risk exposed if this best practice is not established:** Medium 

## Implementation guidance
<a name="implementation-guidance-29"></a>

 Deliver targeted training sessions and simulate threat scenarios relevant to OT and industrial environments. 

### Implementation steps
<a name="implementation-steps-30"></a>
+  Identify key roles that need training (for example, developers, operators, and integrators). 
+  Use AWS learning resources or third-party courses tailored to industrial security. 
+  Conduct quarterly refresher sessions and phishing simulations. 
+  Track and report training completion and outcomes to leadership. 

## Resources
<a name="resources-30"></a>
+  [AWS Security Fundamentals (Digital) ](https://explore.skillbuilder.aws/learn/course/external/view/elearning/13441/aws-security-fundamentals) 
+  [ NICE Framework Resource Center ](https://www.nist.gov/itl/applied-cybersecurity/nice/nice-framework-resource-center)