when (date and time) the event occurred; where the event occurred; the source of the event; the outcome (success or failure) of the event; and, the identity of any user/subject associated with the event. Failure to meet the security training record requirements listed below could result in the dissemination of unsuitable, unauthorized or erroneous security-related content in the training: [Test: AT-4.1 - Security Training (i) the organization documents [Test: AT-4.1 - Security Training [E-# OR Records [NIST and monitors individual Security Training High Records] W-#] w/ DHS 4300A information system security Records] AT-4] training activities including Not Entered basic security awareness Not Entered training and specific information system security training; (ii) the organization defines the time period for retaining individual training records; and,
when (date and time) the event occurred; where the event occurred; the source of the event; the outcome (success or failure) of the event; and, the identity of any user/subject associated with the event. [E-# OR W-#] Security Training Records [NIST w/ DHS 4300A AT-4] [Test: AT-4.1 - Security Training Records] Not Entered Failure to meet the security training record requirements listed below could result in the dissemination of unsuitable, unauthorized or erroneous security-related content in the training: (i) the organization documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; (ii) the organization defines the time period for retaining individual training records; and, High [Test: AT-4.1 - Security Training Records] Not Entered