CCI-000107

Implementation Guidance

Determine if practical exercises in literacy training that simulate events and incidents are provided.

Validation Procedures

Examine: [SELECT FROM: System security plan; privacy plan; security awareness and training policy; procedures addressing security awareness training implementation; security awareness training curriculum; security awareness training materials; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel who receive literacy training and awareness; organizational personnel with responsibilities for security awareness training; organizational personnel with information security responsibilities]. Test: [SELECT FROM: Mechanisms implementing cyber-attack simulations in practical exercises].