information usage, which could lead to the user inadvertently abusing the information system resources: (i) explicit restrictions on the Not Entered use of social networking sites; (ii) posting information on commercial Web sites; and (iii) sharing information system account information. Failure to meet the security awareness requirements indicated could result in the organization's personnel's incomplete knowledge of the organization's security policy: (i) the organization provides basic security awareness [Test: AT-2.1 - training to all information Security Awareness [Test: AT-2.1 - Security Awareness [E-# OR system users (including [NIST 800-53 w/ Security Awareness High Training] W-#] managers, senior executives, DHS 4300A AT-2] Training] and contractors) as part of Not Entered initial training for new users Not Entered and when required by system changes; (ii) the organization defines the frequency of refresher security awareness training; and, (iii) the organization provides refresher security awareness training in accordance with the
Not Entered information usage, which could lead to the user inadvertently abusing the information system resources: (i) explicit restrictions on the use of social networking sites; (ii) posting information on commercial Web sites; and (iii) sharing information system account information. [E-# OR W-#] Security Awareness [NIST 800-53 w/ DHS 4300A AT-2] [Test: AT-2.1 - Security Awareness Training] Not Entered Failure to meet the security awareness requirements indicated could result in the organization's personnel's incomplete knowledge of the organization's security policy: (i) the organization provides basic security awareness training to all information system users (including managers, senior executives, and contractors) as part of initial training for new users and when required by system changes; (ii) the organization defines the frequency of refresher security awareness training; and, (iii) the organization provides refresher security awareness training in accordance with the High [Test: AT-2.1 - Security Awareness Training] Not Entered