CCI-002053

The organization provides training to its personnel on organization-defined indicators of malicious code to recognize suspicious communications and anomalous behavior in organizational information systems.

Implementation Guidance

The organization being inspected/assessed provides training to its personnel on indicators of malicious code defined in AT-3 (4), CCI 2054 to recognize suspicious communications and anomalous behavior in organizational information systems.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the training materials and indicators of malicious code defined in AT-3 (4), CCI 2054 to ensure the organization being inspected/assessed provides users with the means to recognize suspicious communications and anomalous behavior in organizational information systems.

Compelling Evidence

1.) Training documentation and procedures, which includes how to recognize suspicious communications and anomalous behavior in organizational information systems.

The controls below (if any) were marked by NIST as being related to CCI-002053.