IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Personnel Remarks
____________________________________________________________________ .........................................
S 3.4 Training before actual use of a program
Initiation responsibility: Head of Personnel Section; superiors
Implementation responsibility: Superiors; staff responsible for the individual
IT applications
Damage caused by improper handling of IT applications can be avoided if the
users are given a detailed briefing on the respective IT applications. Therefore,
it is a must for users to be sufficiently trained before assuming IT-supported
tasks. This refers to both the use of standard programme packages and
specifically developed IT applications.
In addition, training will also have to be provided in case of extensive changes
to a given IT application.
Where self-explanatory user manuals on IT applications are available, autodidactic
training may be requested. in this case, it is essential that the staff
members concerned be given sufficient time for such self-education.
Additional controls:
- Have staff members who are to assume an IT function with which they are
not yet acquainted been sufficiently trained? Has a training schedule been
developed as regards the introduction of a new IT application?
- Which IT applications have been added since the last review? How have
the staff been familiarised with such tasks? Which training activities have
since then been attended by staff members?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000