Navigate

CCI-001336

CCI-001336 Definition

Retain individual training records for an organization-defined time-period.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Determine if individual training records are retained for [AT-04_ODP; time period for retaining individual training records is defined].

Validation Procedures

Examine: [SELECT FROM: Security and privacy awareness and training policy; procedures addressing security and privacy training records; security and privacy awareness and training records; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with information security and privacy training record retention responsibilities]. Test: [SELECT FROM: Mechanisms supporting the management of security and privacy training records].

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001336.

Control	Description
AT-4	a: Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and b: Retain individual training records for [time period for retaining individual training records is defined;].