CCI-001480

The organization defines the frequency for providing refresher security awareness training to all information system users (including managers, senior executives, and contractors).

Implementation Guidance

DoD has defined the frequency as annually.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level (DoDD 8570.01). DoD has defined the frequency as annually.

Compelling Evidence

Automatically compliant per DoDD 8570.01

The controls below (if any) were marked by NIST as being related to CCI-001480.