Background
 Company employees must undergo a yearly user-certification test, where they reaffirm their understanding of and adherence to established Security Policies and Standards. Those with special relationships with the company may provide similar requirements of their employees; however, all personnel providing services to the company or using company resources must execute the User-Certification Process (UCP) and optionally the review quiz contained here within.  For those who have already completed the UCP, an abbreviated (short form) UCP is available.  

Scope and Objective
The target audience includes all personnel with access to company assets and/or performing company business. This document provides instructions and guidelines necessary to administer and execute the UCP.

Approach
This document, the UCP rollout presentation , and the UCP, is available for distribution and use by all individuals as required.  It is the responsibility of the company's leadership team, business unit managers, site manager, or other so designated individual to ensure that all individuals (as appropriate) under their direction or supervision execute the UCP.

The roll out presentation provides an overview of the UCP and should be used to facilitate its execution. The presentation is optional and can be given to small groups or reviewed individually.  The site manager, business unit manager, etc. is responsible for delivering the completed UCPs to the designated company individual (s) responsible for collecting and archiving the UCPs.

This process will be conducted annually.  However, with the exception of new employees, subsequent UCPs will consist of a simple statement reaffirming the detailed UCP and any updates or changes as required.  A review quiz is available measure the users comprehension of the policies and standards.  The review quiz can be used in conjunction with performance appraisals.

Deadlines and Penalties
All UCP documents (hard copy or electronic) must be delivered to designate individuals.  Site managers, business unit managers, etc. must justify in writing to their respective leadership team manager why specific employee UCPs were not completed and when they can be expected to be delivered.  Failure to comply with this requirement can result in disciplinary action including termination.