Protect · Foundational tier · Security Awareness

PR-10Staff and customers are trained to spot scams

Staff complete security training and phishing simulations, and customers receive regular scam advisories.

Status

Evidence indicates

All 2 items support it and are fresh.

Exposure

Medium

2 evidence items from 2 sources

CCSA · Protect

Below Foundational

Not blocking this domain's next tier.

Evidence chain

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

ev-pr10-1

98% of staff finished annual training; phishing click rate is 3.1%

ServiceNow ITSM · export · collected 40 h ago (Oct 13, 2026 · 23:01 UTC) · limit 30 days

Supports

Query: GET /api/now/table/u_training_completion?sysparm_query=u_course=SEC-ANNUAL-2026
Identity: oauth app assurance-ro (table ACL: read)
Collector: servicenow-collector 2.0.3
Window: 720 h
Records: 4,200
SHA-256: 7abae4bb1c579b8d23472c7c612880b9c627cf0179d1f1e126500a6d69f80d6c

ev-pr10-2

Scam advisories reached 2.1 million app users this month

Core banking Fraud management system · export · collected 5 h ago (Oct 15, 2026 · 10:01 UTC) · limit 30 days

Supports