AT-3(2)

Requirement

Provide [Assignment: organization-defined personnel or roles] with initial and [Assignment: organization-defined frequency] training in the employment and operation of physical security controls.

Discussion

Physical security controls include physical access control devices, physical intrusion and detection alarms, operating procedures for facility security guards, and monitoring or surveillance equipment.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Security and privacy awareness and training policy; procedures addressing security and privacy training implementation; security and privacy training curriculum; security and privacy training materials; system security plan; privacy plan; training records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for role-based security and privacy training; organizational personnel with responsibilities for employing and operating physical security controls].

ID	Assessment Objectives
AT-03(02)	<AT-03(02)_ODP[01] personnel or roles> is/are provided with initial and refresher training <AT-03(02)_ODP[02] frequency> in the employment and operation of physical security controls.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!