Assessment Objective
Determine if:
- AT-02(01) practical exercises in literacy training that simulate events and incidents are provided.
Assessment Methods
Examine
- System security plan
- privacy plan
- security awareness and training policy
- procedures addressing security awareness training implementation
- security awareness training curriculum
- security awareness training materials
- other relevant documents or records
Interview
- Organizational personnel who receive literacy training and awareness
- organizational personnel with responsibilities for security awareness training
- organizational personnel with information security responsibilities
Test
- Mechanisms implementing cyber-attack simulations in practical exercises
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | AT-02(01) Practical Exercises |