164.308(a)(5)(i) Security Awareness and Training (Standard)
Administrative safeguard · Standard
The requirement as we hold it
Security Awareness and Training (Standard). Implement a security awareness and training program for all workforce members. NIST recommends role-based content, onboarding plus annual refresh, and reinforcement reminders.
The examiner asks
- Show me the security awareness and training programme for all workforce members.
- Where is the completion record for the last cycle?
Evidence to bring
- the training programme
- the completion records
Source: 164.308(a)(5)(i) at eCFR. Our statement of the clause, not the instrument verbatim.