Formal training on all policies and procedures relating to acceptable use, reporting lost or stolen equipment, password policy, access to computerized systems and reporting cybersecurity incidents is required by all employees and contractors.