8.2 Security training
8.2.1. The relevant entities shall ensure that employees, whose roles require security relevant skill sets and expertise, receive training on network and information system security. 8.2.2. The relevant entities shall establish, implement and apply a training program in line with the network and information security policy, topic-specific policies and other relevant procedures on network and