Cyber Security Staff Awareness Recognition Scheme - Evidence/Document Submission

Thank you very much for participating in the Cyber Security Staff Awareness Recognition Scheme. Please kindly fill in the form to upload the relevant documents for assessment.

The assessment result will be notified within Sep 2024, and you will be invited to join the recognition ceremony in early November 2024.

Assessment Criteria:


Criteria	Requirement
1. Cyber Security Training	Ensure that cyber security training has been provided to at least 50% of the staff within the past 12 months, either through online or physical training sessions.
2. Phishing Drill Participation	Ensure that all staff have participated in a phishing drill at least once in the past 12 months, which can be conducted through self-developed drills or ethical drill programs organized by third parties.
3. Comprehensive Cyber Security Policy	Establish and maintain a comprehensive cyber security policy accessible to all staff, covering areas such as work-from-home policies, password policies, and incident response policies etc.
4. Reporting Channels for Cyber Security Issues	Implement effective channels for staff to report any cyber security issues, including a designated channel to report suspicious or malicious emails.
5. Dissemination of Cyber Security Information	Promote the dissemination of cybersecurity information among staff, such as by actively participating in cyber security information sharing platforms or through regular updates and announcements.

Data Collection Statement

By filling this form, you hereby consent to HKIRC and the terms and conditions of this activity, as well as HKIRC's "Privacy Policy" and "Personal Information Collection Statement". You acknowledge and agree that HKIRC may utilize your name, phone number, and email address for the purpose of this activity and to facilitate your application. Furthermore, you authorize HKIRC to utilize the personal information provided in the registration form above for statistical analysis purposes.

Privacy Policy : https://www.hkirc.hk/en/privacy-policy/
Personal Information Collection Statement : https://www.hkirc.hk/zh-hant/Personal-

Question Title

* 1. Full organisation name (English)

Question Title

* 2. Full organisation name (Chinese)

Question Title

* 3. Contact information

Question Title

* 4. Contact Email

Question Title

* 5. Contact Phone Number

Question Title

* 6. Please indicate the completion of following assessment criteria

	Yes	No
Cyber Security Training	Cyber Security Training Yes	Cyber Security Training No
Phishing Drill Participation	Phishing Drill Participation Yes	Phishing Drill Participation No
Comprehensive Cyber Security Policy	Comprehensive Cyber Security Policy Yes	Comprehensive Cyber Security Policy No
Reporting Channels for Cyber Security Issues	Reporting Channels for Cyber Security Issues Yes	Reporting Channels for Cyber Security Issues No
Dissemination of Cyber Security Information	Dissemination of Cyber Security Information Yes	Dissemination of Cyber Security Information No

Question Title

* 7. Assessment: Cyber Security Training - Declaration

Number of Staff

Number of Staff Attended Cyber Security Training in past 12 months

Question Title

* 8. Assessment - Cyber Security Training: Please Upload the Evidence/Document if applicable

Ensure that cyber security training has been provided to at least 50% of the staff within the past 12 months, either through online or physical training sessions.