Nonreporting Entities' Information Security Compliance

Mar 30, 2023 - Many nonreporting entities used cybersecurity training software offerings to conduct at least annual cybersecurity awareness training and perform mock phishing exercises —that is, e ‑mails or messages sent by internal IS staff to attempt to mislead an entity ’s employees into, for example, clicking a link or downloading a file that contains malware.
https://lao.ca.gov/Publications/Report/4756