The three CMMC Level 2 awareness and training requirements: security risk awareness for managers, administrators and users, role-based training, and insider threat awareness.
Making managers, system administrators and users aware of the security risks of their activities and of the security policies, standards and procedures that apply. Covers awareness methods such as phishing simulations and the training records assessors examine.
Defining information security duties, assigning them to named people, and training those people to carry them out. Covers how role-based training differs from general awareness and what training evidence assessors look for.
Training managers and employees to recognize and report potential indicators of insider threat, with guidance tailored to managers and general staff. Covers training content, insider threat procedures and evidence.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.