A training program is an ongoing structure for keeping people current, supporting productivity, and helping them grow into useful new disciplines. Effective programs make learning resources accessible and reserve time for using them. section 6.6 section 6.8
Build the program around practical organizational needs:
- Combine accessible online resources with internal knowledge-sharing sessions led by subject-matter experts. section 6.6 section 6.6.5
- Schedule training time explicitly rather than treating learning as an after-hours activity. section 6.6
- Include training and business support in project plans when people begin using new deliverables. section 3.7.1
- Repeat security-focused training for people who regularly interact with external contacts. section 12.3
Testing readiness with a mystery shopper
Invite a trusted unknown visitor to attempt entry without signing in. The exercise exposes weaknesses in reception and access practices that regular training can address. section 12.3

