AT-4: Training Records
- NIST Special Publication 800-53 Revision 4:
- AT-4: Security Training Records
- Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and
- Retain individual training records for [Assignment: organization-defined time period].
Documentation for specialized training may be maintained by individual supervisors at the discretion of the organization. The National Archives and Records Administration provides guidance on records retention for federal agencies.