AT-4: Security Training Records

Control Family:

Awareness And Training

Priority:

P3: Implement P3 security controls after implementation of P1 and P2 controls.

Baselines:

Low
- AT-4
Moderate
- AT-4
High
- AT-4

Next Version:

NIST Special Publication 800-53 Revision 5:
AT-4: Training Records

Control Statement

The organization:

Documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; and
Retains individual training records for [Assignment: organization-defined time period].

Supplemental Guidance

Documentation for specialized training may be maintained by individual supervisors at the option of the organization.