Assessment Objective

Determine if:

• security literacy training on the advanced persistent threat is provided to system users.
• security literacy training on recognizing suspicious communications and anomalous behavior in systems using [Assignment: indicators of malicious code] is provided to system users.
• security literacy training on the cyber threat environment is provided to system users.
• security literacy training content is updated [Assignment: frequency].
• security literacy training content is updated following [Assignment: events]

Assessment Methods

Examine

• System security plan
• security literacy and awareness training policy
• procedures addressing security literacy and awareness training implementation
• security literacy and awareness training curriculum
• security literacy and awareness training materials
• other relevant documents or records

Interview

• Personnel who receive security literacy and awareness training
• personnel with responsibilities for security literacy and awareness training
• personnel with information security responsibilities

Свързани задачи

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final