Skip to main content

💼 AT-2 Literacy Training and Awareness

  • ID: /frameworks/nist-sp-800-53-r5/at/02

Description​

a. Provide security and privacy literacy training to system users (including managers, senior executives, and contractors):

  1. As part of initial training for new users and [Assignment: organization-defined frequency] thereafter; and
  2. When required by system changes or following [Assignment: organization-defined events]; b. Employ the following techniques to increase the security and privacy awareness of system users [Assignment: organization-defined awareness techniques]; c. Update literacy training and awareness content [Assignment: organization-defined frequency] and following [Assignment: organization-defined events]; and d. Incorporate lessons learned from internal or external security incidents or breaches into literacy training and awareness techniques.

Similar​

  • Internal
    • ID: dec-c-71d48d29

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 FedRAMP High Security Controls → 💼 AT-2 Literacy Training and Awareness (L)(M)(H)2no data
💼 FedRAMP Low Security Controls → 💼 AT-2 Literacy Training and Awareness (L)(M)(H)1no data
💼 NIST CSF v2.0 → 💼 PR.AT-01: Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind8no data

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 AT-2(1) Literacy Training and Awareness _ Practical Exercisesno data
💼 AT-2(2) Literacy Training and Awareness _ Insider Threatno data
💼 AT-2(3) Literacy Training and Awareness _ Social Engineering and Miningno data
💼 AT-2(4) Literacy Training and Awareness _ Suspicious Communications and Anomalous System Behaviorno data
💼 AT-2(5) Literacy Training and Awareness _ Advanced Persistent Threatno data
💼 AT-2(6) Literacy Training and Awareness _ Cyber Threat Environmentno data