AT-2(6) Cyber Threat Environment
Control enhancement of AT-2 Literacy Training and Awareness
Control
Provide literacy training on the cyber threat environment; and
Reflect current cyber threat information in system operations.
Discussion
Since threats continue to change over time, threat literacy training by the organization is dynamic. Moreover, threat literacy training is not performed in isolation from the system operations that support organizational mission and business functions.
Related controls
Need AT-2(6) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.