id: "AT-06" title: "Training Feedback" family: "AT" family_name: "Awareness and Training" sort_id: "at-06" priority: "P2" implementation_level: "organization"
Statement
Provide feedback on organizational training results to the following personnel {{ insert: param, at-06_odp.01 }}: {{ insert: param, at-06_odp.02 }}.
Guidance
Training feedback includes awareness training results and role-based training results. Training results, especially failures of personnel in critical roles, can be indicative of a potentially serious problem. Therefore, it is important that senior managers are made aware of such situations so that they can take appropriate response actions. Training feedback supports the evaluation and update of organizational training described in AT-2b and AT-3b.
Assessment Objective
feedback on organizational training results is provided {{ insert: param, at-06_odp.01 }} to {{ insert: param, at-06_odp.02 }}.
Security awareness and training policy
procedures addressing security training records
security awareness and training records
security plan
other relevant documents or records
Organizational personnel with information security training record retention responsibilities
Mechanisms supporting the management of security training records