Awareness and Training (AT) templates
Templates for the Awareness and Training (AT) family of controls in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Revision 5, with the family policy and procedure first.
- Awareness and Training PolicyPOL-AT
In this policy, the CISO sets the Organization's requirements for awareness and training in every information system that the Organization operates or that others operate for it. The CISO issues the policy under these authorities:
- Awareness and Training ProcedurePROC-AT
The people named in this procedure use it to carry out the AT control family policy (POL-AT). It covers every control in the awareness and training family. The steps, the people responsible, and the evidence below show how the Organization meets those National Institute of Standards and Technology (NIST) SP 800-53 Rev.
- Role-Based Training and Cybersecurity Workforce PlanPLAN-WF-001
The CISO uses this plan to make sure that each person with security or privacy duties has the skills those duties need, and that the Organization knows where it lacks them. It covers: