Assessment Objective
Determine if:
- AT-02(01) practical exercises in literacy training that simulate events and incidents are provided.
Assessment Methods
Examine
- System security plan
- privacy plan
- security awareness and training policy
- procedures addressing security awareness training implementation
- security awareness training curriculum
- security awareness training materials
- other relevant documents or records
Interview
- Organizational personnel who receive literacy training and awareness
- organizational personnel with responsibilities for security awareness training
- organizational personnel with information security responsibilities
Test
- Mechanisms implementing cyber-attack simulations in practical exercises
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AT-02(01) Practical Exercises |