id: "AT-02(06)" title: "Cyber Threat Environment" family: "AT" family_name: "Awareness and Training" sort_id: "at-02.06" priority: "P2" implementation_level: "organization" parent: "AT-02" enhancement: True
Provide literacy training on the cyber threat environment; and
Reflect current cyber threat information in system operations.
Guidance
Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.
Assessment Objective: literacy training on the cyber threat environment is provided;
Assessment Objective: system operations reflects current cyber threat information.
System security plan
privacy plan
literacy training and awareness policy
procedures addressing literacy training and awareness training implementation
literacy training and awareness curriculum
literacy training and awareness materials
other relevant documents or records
Organizational personnel who receive literacy training and awareness
organizational personnel with responsibilities for basic literacy training and awareness
organizational personnel with information security and privacy responsibilities