CCI-003795

Monitor individual information privacy training activities, including privacy awareness training and specific privacy training.

Implementation Guidance

Determine if: - information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are documented. - information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are monitored.

Validation Procedures

Examine: [SELECT FROM: Security and privacy awareness and training policy; procedures addressing security and privacy training records; security and privacy awareness and training records; system security plan; privacy plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with information security and privacy training record retention responsibilities]. Test: [SELECT FROM: Mechanisms supporting the management of security and privacy training records].

The controls below (if any) were marked by NIST as being related to CCI-003795.