03.02.03E Literacy and Awareness Training Feedback

Statement

Provide feedback on organizational training results to the following personnel {{ insert: param, A.03.02.03E.ODP.01 }}.

Guidance

Training feedback includes literacy and role-based training results, which can indicate a potentially serious problem, especially the failures of personnel in critical roles. Managers should be made aware of such situations so that they can respond accordingly. Training feedback supports the evaluation and update of organizational training content and methodology. This requirement does not enhance a specific requirement in SP 800-171 but can be used to strengthen the protection of CUI associated with critical programs or high value assets.

Statement

• (includes preempt) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes detect) Reduce risk due to ignorance of threat events and possible replicated or similar threat events in the same or similar environments.

  • Reduce likelihood of impact.

  • The adversary loses the advantage of stealth as defenders are better prepared by developing and sharing threat intelligence.

Assessment objective

feedback on organizational training results is provided to {{ insert: param, A.03.02.03E.ODP.01 }}.

Assessment method

• Security awareness training policy procedures addressing security literacy and awareness training records security literacy and awareness training records security plan other relevant documents or records

Assessment method

• Personnel with security and awareness training record retention responsibilities

Assessment method

• Mechanisms supporting the management of security literacy and awareness training records

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

3. Relaterede reguleringer

Linkede sager

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final