Requirement 12.9.4

Provide appropriate training to staff with security breach response responsibilities.