AT-2(6)

Requirement
1. Provide literacy training on the cyber threat environment; and
2. Reflect current cyber threat information in system operations.

Discussion

Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System security plan; privacy plan; literacy training and awareness policy; procedures addressing literacy training and awareness training implementation; literacy training and awareness curriculum; literacy training and awareness materials; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel who receive literacy training and awareness; organizational personnel with responsibilities for basic literacy training and awareness; organizational personnel with information security and privacy responsibilities].

ID	Assessment Objectives
AT-02(06)(b)	system operations reflects current cyber threat information.
AT-02(06)(a)	literacy training on the cyber threat environment is provided;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!