Assessment Objective
Determine if:
- AT-02(06)(a) literacy training on the cyber threat environment is provided;
- AT-02(06)(b) system operations reflects current cyber threat information.
Assessment Methods
Examine
- System security plan
- privacy plan
- literacy training and awareness policy
- procedures addressing literacy training and awareness training implementation
- literacy training and awareness curriculum
- literacy training and awareness materials
- other relevant documents or records
Interview
- Organizational personnel who receive literacy training and awareness
- organizational personnel with responsibilities for basic literacy training and awareness
- organizational personnel with information security and privacy responsibilities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | AT-02(06) Cyber Threat Environment |