The purpose of this policy is to establish a repeatable training regimen aligned to staff roles and to ensure training practices are reviewed and updated annually.

Infrastructure Security and Cyber Security are crucial elements of any application or infrastructure hosting services. DLZP has made a commitment to design and build highly secure environments for our customers. But, attack strategies and vulnerabilities are consistently evolving so regular training is necessary to keep the team sharp with contemporary information.

Ensure that managers, systems administrators, and users of organizational systems are made aware of the security risks associated with their activities and of the applicable policies, standards, and procedures related to the security of those systems.

Ensure that personnel are trained to carry out their assigned information security-related duties and responsibilities.

Provide security awareness training on recognizing and reporting potential indicators of insider threat.

DLZP Group shall provide an annual review and training materials or on an as needed basis to ensure the organization maintains the necessary security posture to conduct its business and to align with the security policies required by each hosted client. Training reviews and materials will be based on an associates role e.g. functional, technical, management roles.

Each new employee will be provided a syllabus to review all internal security and operations practices and then undergo a thorough examination of their understanding of DLZP Group security practices and methodologies.

Cyber-Security attack vectors and methods will be review including the pervasive use of Phishing Attacks and how they can overcome multi-factor security methods. Phishing attack training and awareness will be performed at least annually.