CCI-000113

The organization documents individual information system security training activities, including basic security awareness training and specific information system security training.

Implementation Guidance

The organization being inspected/assessed identifies and documents training activities to include basic security awareness training (per AT-2) and role-based security related training (per AT-3) IAW DoD 8570.01M.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the security awareness training activities to ensure the organization being inspected/assessed documents training activities to include basic security awareness training (per AT-2) and role-based security related training (per AT-3) IAW DoD 8570.01M.

Compelling Evidence

1.) System security training documentation 2.) Basic security awareness documentation 3.) Specific information system security training documentation

The controls below (if any) were marked by NIST as being related to CCI-000113.