Step-by-step compliance with the Baseline Information Security for Government (BIO)

Do you need to comply with the BIO (Baseline Information Security for Government) and demonstrably meet the requirements of BIO 7.2.2 (awareness, education, and training)? Then one principle is central: employees — and, where relevant, contractors — must receive appropriate security awareness training and be regularly informed about policies and procedures that apply to their role.