|

controlAT-2

Literacy Training and Awareness (AT-2)

Provide security and privacy literacy training to system users (including managers, senior executives, and contractors): Employ the following techniques to increase the security and privacy awareness of system users [organization-defined]; Update literacy training and awareness content [organization-defined] and following [organization-defined] ; and Incorporate lessons learned from internal or external security incidents or breaches into literacy training and awareness techniques.

Security Baselines

LOWMODERATEHIGH

awarenesstrainingworkforce

Why These Connect

Baselined In3

This control is included in the linked security baseline (LOW, MODERATE, or HIGH).

Supports25

These related controls work together — a change to one may affect the others.

Mitigates3

This control helps defend against or reduce the risk of the linked threat technique.

Enhances6

These enhancements add specific capabilities or refinements to the base control.

Related Controls(20)

Threat Coverage(3 ATT&CK techniques)

T1204User Execution T1589Gather Victim Identity Information T1598Phishing for Information

Control Enhancements(6)

AT-2(1)Practical Exercises (AT-2(1))

AT-2(2)Insider Threat (AT-2(2))

AT-2(3)Social Engineering and Mining (AT-2(3))

AT-2(4)Suspicious Communications and Anomalous System Behavior (AT-2(4))

AT-2(5)Advanced Persistent Threat (AT-2(5))

AT-2(6)Cyber Threat Environment (AT-2(6))

See Also

@SP 800-53 Overview ⚖Compare Baselines