Part d (AT) (AT-1) The organization: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: A security awareness and training policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and Procedures to facilitate the implementation of the security awareness and training policy and associated security awareness and training controls; and Reviews and updates the current: Security awareness and training policy [FedRAMP Assignment: at least every 3 years]; and Security awareness and training procedures [FedRAMP Assignment: at least annually]. AT-1 Control Summary Information Responsible Role: Parameter AT-1(a): Parameter AT-1(b)(1): Parameter AT-1(b)(2): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate
Part d (AT) (AT-1) The organization: Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]: A security awareness and training policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and Procedures to facilitate the implementation of the security awareness and training policy and associated security awareness and training controls; and Reviews and updates the current: Security awareness and training policy [FedRAMP Assignment: at least every 3 years]; and Security awareness and training procedures [FedRAMP Assignment: at least annually]. AT-1 Control Summary Information Responsible Role: Parameter AT-1(a): Parameter AT-1(b)(1): Parameter AT-1(b)(2): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate