AT — Awareness and Training
17 controls in the Awareness and Training family
AT-1Policy And Procedures
LOW
MODERATE
HIGH
PRIVACY
AT-2Literacy Training And Awareness
LOW
MODERATE
HIGH
PRIVACY
AT-2(1)Practical Exercises
AT-2(2)Insider Threat
LOW
MODERATE
HIGH
AT-2(3)Social Engineering And Mining
MODERATE
HIGH
AT-2(4)Suspicious Communications And Anomalous System Behavior
AT-2(5)Advanced Persistent Threat
AT-2(6)Cyber Threat Environment
AT-3Role-Based Training
LOW
MODERATE
HIGH
PRIVACY
AT-3(1)Environmental Controls
AT-3(2)Physical Security Controls
AT-3(3)Practical Exercises
AT-3(4)Suspicious Communications And Anomalous System Behavior
AT-3(5)Processing Personally Identifiable Information
PRIVACY
AT-4Training Records
LOW
MODERATE
HIGH
PRIVACY
AT-5Contacts With Security Groups And Associations
AT-6Training Feedback