AT-2(1)

Requirement

Provide practical exercises in literacy training that simulate events and incidents.

Discussion

Practical exercises include no-notice social engineering attempts to collect information, gain unauthorized access, or simulate the adverse impact of opening malicious email attachments or invoking, via spear phishing attacks, malicious web links.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System security plan; privacy plan; security awareness and training policy; procedures addressing security awareness training implementation; security awareness training curriculum; security awareness training materials; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel who receive literacy training and awareness; organizational personnel with responsibilities for security awareness training; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms implementing cyber-attack simulations in practical exercises].

ID	Assessment Objectives
AT-02(01)	practical exercises in literacy training that simulate events and incidents are provided.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!