Assessment Objective
Determine if:
- AT-03(02) [Assignment: personnel or roles] is/are provided with initial and refresher training [Assignment: frequency] in the employment and operation of physical security controls.
Assessment Methods
Examine
- Security and privacy awareness and training policy
- procedures addressing security and privacy training implementation
- security and privacy training curriculum
- security and privacy training materials
- system security plan
- privacy plan
- training records
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for role-based security and privacy training
- organizational personnel with responsibilities for employing and operating physical security controls
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AT-03(02) Physical Security Controls |