Assessment Objective
Determine if:
- AT-03(03)[01] practical exercises in security training that reinforce training objectives are provided;
- AT-03(03)[02] practical exercises in privacy training that reinforce training objectives are provided.
Assessment Methods
Examine
- Security and privacy awareness and training policy
- procedures addressing security and privacy awareness training implementation
- security and privacy awareness training curriculum
- security and privacy awareness training materials
- security and privacy awareness training reports and results
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for role-based security and privacy training
- organizational personnel who participate in security and privacy awareness training
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AT-03(03) Practical Exercises |