ComplianceNIST 800-53 control

NIST-AT-4 Training Records

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AT Awareness and Training
Control
AT-4

Control statement

a. Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and b. Retain individual training records for [Assignment: time period].

Discussion

Documentation for specialized training may be maintained by individual supervisors at the discretion of the organization. The National Archives and Records Administration provides guidance on records retention for federal agencies.

Related

Related control · Compliance (6)

  • NIST-AT-2 Literacy Training and Awareness NIST 800-53 control
  • NIST-AT-3 Role-based Training NIST 800-53 control
  • NIST-CP-3 Contingency Training NIST 800-53 control
  • NIST-IR-2 Incident Response Training NIST 800-53 control
  • NIST-PM-14 Testing, Training, and Monitoring NIST 800-53 control
  • NIST-SI-12 Information Management and Retention NIST 800-53 control

Referenced by Compliance · has member (1)

  • NIST-AT Awareness and Training NIST 800-53 family

Referenced by Compliance · related control (6)

  • NIST-AT-2 Literacy Training and Awareness NIST 800-53 control
  • NIST-AT-3 Role-based Training NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-CP-3 Contingency Training NIST 800-53 control
  • NIST-IR-2 Incident Response Training NIST 800-53 control
  • NIST-PM-31 Continuous Monitoring Strategy NIST 800-53 control