AT-4     Security Training Records

The organization:
     AT-4a.:  Documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; and
     AT-4b.:  Retains individual training records for [Assignment: organization-defined time period].

                    
                

Applicable CNSSI 1253 Baselines

Confidentiality
  • L
  • M
  • H
Integrity
  • L
  • M
  • H
Availability
  • L
  • M
  • H

Supplemental Guidance

Documentation for specialized training may be maintained by individual supervisors at the option of the organization.


Related Controls