AT-04 Security Training Records

Awareness and Training

Low Moderate High Privacy

Description

The organization documents and monitors individual information system security training activities including basic security awareness training and specific information system security training.\n

Supplemental Guidance

None.\n

Changes from Rev 4

Title changed from 'Security Training Records' Adds privacy to control text, to imply training includes privacy, as well as security Discussion includes reference to NARA

Enhancements

(0) None.\n

Compliance Mappings

ISO 17799 (legacy)

None.

COBIT 4.1 (legacy)

DS7.2