Navigate

CCI-000104

CCI-000104 Definition

Disseminate organization-level; mission/business process-level; or system-level awareness and training procedures to organization-defined personnel or roles.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-000104.

Control	Description
AT-1	The organization: a: Develops, documents, and disseminates to [one of ]: 1: A security awareness and training policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and 2: Procedures to facilitate the implementation of the security awareness and training policy and associated security awareness and training controls; and b: Reviews and updates the current: 1: Security awareness and training policy [one of ]; and 2: Security awareness and training procedures [one of ].

Control

Description

AT-1

The organization:

a: Develops, documents, and disseminates to [one of ]:
- 1: A security awareness and training policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
- 2: Procedures to facilitate the implementation of the security awareness and training policy and associated security awareness and training controls; and

b: Reviews and updates the current:
- 1: Security awareness and training policy [one of ]; and
- 2: Security awareness and training procedures [one of ].