|
controlAT-4
Training Records (AT-4)
Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and Retain individual training records for [organization-defined].
Security Baselines
LOWMODERATEHIGH
awarenesstrainingworkforce
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Baselined In3
This control is included in the linked security baseline (LOW, MODERATE, or HIGH).
Supports12
These related controls work together — a change to one may affect the others.
Related Controls(8)
AT-2Literacy Training and Awareness (AT-2)
LMH
AT-3Role-based Training (AT-3)LMH
CP-3Contingency Training (CP-3)LMH
IR-2Incident Response Training (IR-2)LMH
PM-14Testing, Training, and Monitoring (PM-14)SI-12Information Management and Retention (SI-12)LMH
CA-7Continuous Monitoring (CA-7)LMH
PM-31Continuous Monitoring Strategy (PM-31)Cross-Framework Mappings(1)
HIPAAHIPAA Security Rule1 mappingFinal
NIST OLIR informative reference — HIPAA Security Rule to SP 800-53 Rev 5