Assessment Objective
Determine if:
- security literacy training on the advanced persistent threat is provided to system users.
- security literacy training on recognizing suspicious communications and anomalous behavior in systems using [Assignment: indicators of malicious code] is provided to system users.
- security literacy training on the cyber threat environment is provided to system users.
- security literacy training content is updated [Assignment: frequency].
- security literacy training content is updated following [Assignment: events]
Assessment Methods
Examine
- System security plan
- security literacy and awareness training policy
- procedures addressing security literacy and awareness training implementation
- security literacy and awareness training curriculum
- security literacy and awareness training materials
- other relevant documents or records
Interview
- Personnel who receive security literacy and awareness training
- personnel with responsibilities for security literacy and awareness training
- personnel with information security responsibilities
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | 03.02.01E Advanced Literacy and Awareness Training |