Technical and process indicators for the assessment of the effectiveness, coverage and impact of the security training and onboarding programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.
Structure and responsibilities of the Security Champions programme for strengthening the applied security culture.
Canonical catalogue of security training and onboarding requirements (TRN-001 to TRN-009), with applicability by risk level and acceptance criteria for training tracks, verifiable onboarding, Security Champions and training effectiveness.
Strategies and practices to ensure that teams, profiles and stakeholders are prepared to apply Security by Design