AT-2(6): Cyber Threat Environment
Control Family:
Parent Control:
CSF v1.1 References:
Baselines:
(Not part of any baseline)
Control is new to this version of the control set.
Control Statement
- Provide literacy training on the cyber threat environment; and
- Reflect current cyber threat information in system operations.
Supplemental Guidance
Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.