CCI-002834

The organization provides contingency training to information system users consistent with assigned roles and responsibilities when required by information system changes.

Implementation Guidance

The organization being inspected/assessed will update contingency training materials when required by information system changes and provide that training to personnel with contingency roles and responsibilities IAW CP-2, CCI 449. The organization will maintain documentation of the training activity dates, location, and personnel for audit trail purposes and future reference (e.g., scheduling refresher training, etc).

Validation Procedures

The organization conducting the inspection/assessment obtains and examines training materials and documentation of training activities to determine whether the materials are accurate in consideration of the state of the information system and content of the contingency plan. The organization ensures that training is provided to users consistent with assigned roles and responsibilities.

Compelling Evidence

1.) Training materials 2.) Documentation of training activities

The controls below (if any) were marked by NIST as being related to CCI-002834.