Navigate

CCI-003000

CCI-003000 Definition

Implement a process for ensuring that organizational plans for conducting security training activities associated with organizational systems are developed.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-003000.

Control	Description
PM-14	The organization: a: Implements a process for ensuring that organizational plans for conducting security testing, training, and monitoring activities associated with organizational information systems: 1: Are developed and maintained; and 2: Continue to be executed in a timely manner; b: Reviews testing, training, and monitoring plans for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.

Control

Description

PM-14

The organization:

a: Implements a process for ensuring that organizational plans for conducting security testing, training, and monitoring activities associated with organizational information systems:
- 1: Are developed and maintained; and
- 2: Continue to be executed in a timely manner;

b: Reviews testing, training, and monitoring plans for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.