PR.AT-01 General awareness and training
Security awareness and training for all personnel and other users: recognizing social engineering, reporting suspicious activity, acceptable use, basic cyber hygiene, testing and annual refreshers.
PR.AT Awareness and training
Awareness and Training: general awareness for all personnel and role-based training for specialized roles; two Subcategories.
PR.AT-02 Role-based training
Additional training for specialized roles such as security staff, finance, senior leadership and anyone with access to business-critical data, including third parties who hold those roles.
