Assessment Objective
Determine if:
- AT-02(04) literacy training on recognizing suspicious communications and anomalous behavior in organizational systems using [Assignment: indicators of malicious code] is provided.
Assessment Methods
Examine
- System security plan
- privacy plan
- literacy training and awareness policy
- procedures addressing literacy training and awareness implementation
- literacy training and awareness curriculum
- literacy training and awareness materials
- other relevant documents or records
Interview
- Organizational personnel who receive literacy training and awareness
- organizational personnel with responsibilities for basic literacy training and awareness
- organizational personnel with information security and privacy responsibilities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | AT-02(04) Suspicious Communications and Anomalous System Behavior |