Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

500.14(a)(3)500.14(a)(3)

>Control Description

provide periodic, but at a minimum annual, cybersecurity awareness training that includes social engineering for all personnel that is updated to reflect risks identified by the covered entity in its risk assessment.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.