// Level 3 · Controls
Awareness and Training
NIST SP 800-53 Rev 5 Awareness and Training controls.
AT-01Medium
Policy and Procedures
Develop, document, and disseminate to [parameter]:
AT-02Medium
Literacy Training and Awareness
Provide security and privacy literacy training to system users (including managers, senior executives, and contractors):
AT-03Medium
Role-based Training
Provide role-based security and privacy training to personnel with the following roles and responsibilities: [parameter]:
AT-04Medium
Training Records
Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and
AT-05Medium
Contacts with Security Groups and Associations
Contacts with Security Groups and Associations
AT-06Medium
Training Feedback
Provide feedback on organizational training results to the following personnel [parameter]: [parameter].