Awareness and Training (AT)
The Awareness and Training family has 5 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.
| Control | Title | Low | Moderate | High | Privacy |
|---|---|---|---|---|---|
| AT-1 | Policy and Procedures | Yes | Yes | Yes | Yes |
| AT-2 | Literacy Training and Awareness | Yes | Yes | Yes | Yes |
| AT-3 | Role-based Training | Yes | Yes | Yes | Yes |
| AT-4 | Training Records | Yes | Yes | Yes | Yes |
| AT-6 | Training Feedback |
Withdrawn controls: AT-5.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.