Standards Group:
YALE-MSS-11: Security Training
            
      
            YALE-MSS-11.2: Ensure all third parties complete required training
        
                
        Low Risk Endpoint
                
                        
              Not Required
            
                    
              
            
        Moderate Risk Endpoint
                
                        
              Not Required
            
                    
              
            
        High Risk Endpoint
                
                        
              Required for HIPAA
            
                        
              Required for PCI
            
                    
              
            
        Low Risk Server
                
                        
              Not Required
            
                    
              
            
        Moderate Risk Server
                
                        
              Not Required
            
                    
              
            
        High Risk Server
                
                        
              Required
            
                    
              
            
        Low Risk Mobile Device
                
                        
              Not Required
            
                    
              
            
        Moderate Risk Mobile Device
                
                        
              Not Required
            
                    
              
            
        High Risk Mobile Device
                
                        
              Not Required
            
                    
              
            
        Low Risk Network Printer
                
                        
              Not Required
            
                    
              
            
        Moderate Risk Network Printer
                
                        
              Not Required
            
                    
              
            
        High Risk Network Printer
                
                        
              Not Required
            
                    
              
              
      
Details
Vendors are responsible for meeting training requirements. Training requirements should be covered in contracts when applicable.