12.6 Implement a formal security awareness program to make all personnel aware of the cardholder data security policy and procedures.
12.6.a Review the security awareness program to verify it provides awareness to all personnel about the cardholder data security policy and procedures .
12.6.b Examine security awareness program procedures and documentation and perform the following:
If personnel are not educated about their security responsibilities, security safeguards and processes that have been implemented may become ineffective through errors or intentional actions.