1.7 KiB
| implementation-status | control-origination | |||||
|---|---|---|---|---|---|---|
|
|
at-4 - [catalog] Training Records
Control Statement
-
[a] Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and
-
[b] Retain individual training records for time period.
Control guidance
Documentation for specialized training may be maintained by individual supervisors at the discretion of the organization. The National Archives and Records Administration provides guidance on records retention for federal agencies.
Control assessment-objective
information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are documented; information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training, are monitored; individual training records are retained for time period.
What is the solution and how is it implemented?
Implementation a.
Add control implementation description here for item at-4_smt.a
Implementation b.
Add control implementation description here for item at-4_smt.b