// Level 3 · Controls
Awareness and Training
Ensure personnel are trained on CUI handling and security risks.
3.2.1Medium
Role-Based Risk Awareness
Ensure managers, systems administrators, and users are made aware of the security risks associated with their activities.
3.2.2Medium
Role-Based Training
Ensure personnel are trained to carry out their assigned information security duties.
3.2.3Medium
Insider Threat Training
Provide security awareness training on recognizing and reporting potential indicators of insider threat.