Organizational Control: Security Training Records

Control ID: AT-4 Security Training Records Family: Awareness and Training Source: NIST 800-53r4
Control: The organization:
  1. Documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; and
  2. Retains individual training records for [Assignment: organization-defined time period].
Supplemental Guidance:
Documentation for specialized training may be maintained by individual supervisors at the option of the organization.

Related Controls: AT-2, AT-3, PM-14
Control Enhancements: N/A
References: N/A
Mechanisms:
Protocol Implementation Conformance Statements: N/A