Security and Privacy Controls for Federal Information Systems and Organizations
No. | Control | Priority | Low | Moderate | High |
---|---|---|---|---|---|
AT-1 | SECURITY AWARENESS AND TRAINING POLICY AND PROCEDURES | P1 |
AT-1
|
AT-1
|
AT-1
|
AT-2 | SECURITY AWARENESS TRAINING | P1 |
AT-2
|
AT-2
(2)
|
AT-2
(2)
|
AT-3 | ROLE-BASED SECURITY TRAINING | P1 |
AT-3
|
AT-3
|
AT-3
|
AT-4 | SECURITY TRAINING RECORDS | P3 |
AT-4
|
AT-4
|
AT-4
|
AT-5 | CONTACTS WITH SECURITY GROUPS AND ASSOCIATIONS |
|
|
|