> For the complete documentation index, see [llms.txt](https://docs.glesys.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.glesys.com/security/security-measures/basic-cyber-hygiene-and-cybersecurity-training.md).

# Basic cyber hygiene and cybersecurity training

Glesys maintains baseline security practices and awareness expectations for personnel.

### Key elements:

* **Information classification training:** All employees and contractors receive introduction training and annual refreshers on information classification, handling requirements, and reporting.
* **Credential hygiene & MFA:** Strong authentication requirements include MFA for accessing relevant systems and enhanced protections for privileged accounts.
* **Endpoint security baseline:** Requirements for patching, encryption, firewall use, malware protection, device registration (including BYOD), and incident reporting for lost/compromised devices.