Assessment Objective
Determine if:
- AT-02(02)[01] literacy training on recognizing potential indicators of insider threat is provided;
- AT-02(02)[02] literacy training on reporting potential indicators of insider threat is provided.
Assessment Methods
Examine
- System security plan
- privacy plan
- literacy training and awareness policy
- procedures addressing literacy training and awareness implementation
- literacy training and awareness curriculum
- literacy training and awareness materials
- other relevant documents or records
Interview
- Organizational personnel who receive literacy training and awareness
- organizational personnel with responsibilities for literacy training and awareness
- organizational personnel with information security and privacy responsibilities
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AT-02(02) [L] Insider Threat |