CCI-003796

Provide feedback on organizational training results to organization-defined personnel on an organization-defined frequency.

Implementation Guidance

Determine if feedback on Organizational training results is provided [AT-06_ODP[01]; frequency at which to provide feedback on Organizational training results is defined] to [AT-06_ODP[02]; personnel to whom feedback on Organizational training results will be provided is/are assigned].

Validation Procedures

Examine: [SELECT FROM: Security awareness and training policy; procedures addressing security training records; security awareness and training records; security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with information security training record retention responsibilities]. Test: [SELECT FROM: Mechanisms supporting the management of security training records].

The controls below (if any) were marked by NIST as being related to CCI-003796.