Navigate

CCI-001480

CCI-001480 Definition

The organization defines the frequency for providing refresher security awareness training to all information system users (including managers, senior executives, and contractors).

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined the frequency as annually.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level (DoDD 8570.01). DoD has defined the frequency as annually.

DISA Compelling Evidence

Automatically Compliant

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001480.

Control	Description
AT-2	The organization provides basic security awareness training to information system users (including managers, senior executives, and contractors): AT-2a.: As part of initial training for new users; AT-2b.: When required by information system changes; and AT-2c.: [Assignment: organization-defined frequency] thereafter.