AT-2(6): Cyber Threat Environment

Control Family:

Awareness and Training

CSF v1.1 References:


(Not part of any baseline)

Info icon.

Control is new to this version of the control set.

Control Statement

  1. Provide literacy training on the cyber threat environment; and
  2. Reflect current cyber threat information in system operations.

Supplemental Guidance

Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.