+AT-04 Training Records

AT-04 Training Records

Control

  1. Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and
  2. Retain individual training records for [Assignement: time period].

Discussion

Documentation for specialized training may be maintained by individual supervisors at the discretion of the organization. The National Archives and Records Administration provides guidance on records retention for federal agencies.

Assessment Objective

    1. information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are documented;
    2. information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are monitored;
  2. individual training records are retained for [Assignement: time period].

Assessment Method

Examine

Security and privacy awareness and training policy procedures addressing security and privacy training records security and privacy awareness and training records system security plan privacy plan other relevant documents or records

Interview

Organizational personnel with information security and privacy training record retention responsibilities

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi

Povezane zadeve

Povezave
is blocked by AT-04 Training Records – Assessment Procedure
is blocked by Security, Compliance & Resilience Training Records