AT-02.1 ยท Practical Exercises

Control Description

Provide practical exercises in literacy training that simulate events and incidents.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

Provide practical exercises in literacy training that simulate events and incidents.

Supplemental Guidance

Practical exercises include no-notice social engineering attempts to collect information, gain unauthorized access, or simulate the adverse impact of opening malicious email attachments or invoking, via spear phishing attacks, malicious web links.

Related NIST Controls
Other NIST 800-53 controls related to this one