CCI-003778

Defines the indicators of malicious code used to recognize suspicious communications and anomalous behavior in organizational systems.

Implementation Guidance

Determine if literacy training on recognizing suspicious communications and anomalous behavior in Organizational systems using [AT-02(04)_ODP; indicators of malicious code are defined] is provided.

Validation Procedures

Examine: [SELECT FROM: System security plan; privacy plan; literacy training and awareness policy; procedures addressing literacy training and awareness implementation; literacy training and awareness curriculum; literacy training and awareness materials; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel who receive literacy training and awareness; organizational personnel with responsibilities for basic literacy training and awareness; organizational personnel with information security and privacy responsibilities].

The controls below (if any) were marked by NIST as being related to CCI-003778.