CCI-002816

The organization provides information spillage response training according to an organization-defined frequency.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to provide information spillage response training annually. The organization must maintain a record of training. DoD has defined the frequency as annually.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the training records for a sampling of incident response personnel to ensure the organization being inspected/assessed provides information spillage response training annually. DoD has defined the frequency as annually.

Compelling Evidence

1.) Documentation of a process to provide information spillage response training annually 2.) Record of training

The controls below (if any) were marked by NIST as being related to CCI-002816.