Navigate

SR-11(1)

SR-11(1): Anti-counterfeit Training

Train [personnel or roles requiring training to detect counterfeit system components (including hardware, software, and firmware) is/are defined;] to detect counterfeit system components (including hardware, software, and firmware).

Supplemental

None.

CIA Levels
Confidentiality	low
Integrity	low
Availability	low

Overlays
DAF Baseline

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SR-11(1).

Control	Description
AT-3	a: Provide role-based security and privacy training to personnel with the following roles and responsibilities: [one of ]: 1: Before authorizing access to the system, information, or performing assigned duties, and [the frequency at which to provide role-based security and privacy training to assigned personnel after initial training is defined;] thereafter; and 2: When required by system changes; b: Update role-based training content [the frequency at which to update role-based training content is defined;] and following [events that require role-based training content to be updated are defined;] ; and c: Incorporate lessons learned from internal or external security incidents or breaches into role-based training.

Control

Description

AT-3

a: Provide role-based security and privacy training to personnel with the following roles and responsibilities: [one of ]:
- 1: Before authorizing access to the system, information, or performing assigned duties, and [the frequency at which to provide role-based security and privacy training to assigned personnel after initial training is defined;] thereafter; and
- 2: When required by system changes;

b: Update role-based training content [the frequency at which to update role-based training content is defined;] and following [events that require role-based training content to be updated are defined;] ; and

c: Incorporate lessons learned from internal or external security incidents or breaches into role-based training.

Enhancements

The controls below (if any) add on to the requirements of SR-11(1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SR-11(1).

CCI	Definition
CCI-005137	Train organization-defined personnel or roles to detect counterfeit system components including hardware, software, and firmware.
CCI-005138	Defines the personnel or roles who are trained to detect counterfeit system components (including hardware, software, and firmware).