AT — AWARENESS AND TRAINING
AT-4: SECURITY TRAINING RECORDS
-
NIST 800-53R4 Membership AT-4:
- LOW
- MODERATE
- HIGH
The organization:
- a. Documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; and
- b. Retains individual training records for [Assignment: organization-defined time period].
SUPPLEMENTAL GUIDANCE
Documentation for specialized training may be maintained by individual supervisors at the option of the organization.
RELATED CONTROLS: AT-4
CONTROL ENHANCEMENTS
NO CONTROL ENHANCEMENTS
REFERENCES:
- NO REFERENCES