Assessment Objective
Determine if:
- AT-03(01) [Assignment: personnel or roles] are provided with initial and refresher training [Assignment: frequency] in the employment and operation of environmental controls.
Assessment Methods
Examine
- Security and privacy awareness and training policy
- procedures addressing security and privacy training implementation
- security and privacy training curriculum
- security and privacy training materials
- system security plan
- privacy plan
- training records
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for role-based security and privacy training
- organizational personnel with responsibilities for employing and operating environmental controls
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AT-03(01) Environmental Controls |