prior to their authorized Exceptional being granted unescorted Circumstances) prior to authorized physical access, their being granted electronic and and did not authorized electronic authorized identify, assess and authorized unescorted and correct the unescorted physical physical access, deficiencies. (2.2) access, and did not and did not identify, assess and OR identify, assess correct the deficiencies. and correct the (2.2) The Responsible deficiencies. Entity OR (2.2) implemented a The Responsible Entity cyber security OR implemented a cyber training program The Responsible security training but failed to train Entity program but failed to three individuals implemented a train four or more with authorized cyber security individuals with electronic or training program authorized electronic or authorized but failed to train authorized unescorted unescorted one individual physical access within physical access with authorized 15 calendar months of within 15 calendar electronic or the previous training months of the authorized completion date, and previous training unescorted did not identify, assess completion date, physical access and correct the and did not within 15 deficiencies. (2.3) identify, assess calendar months and correct the of the previous deficiencies. (2.3) training completion date, and did not identify, assess and correct the deficiencies. (2.3)
prior to their being granted authorized electronic and authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train one individual with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3) authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train three individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3) Exceptional Circumstances) prior to their being granted authorized electronic and authorized unescorted physical access, and did not identify, assess and correct the deficiencies. (2.2) OR The Responsible Entity implemented a cyber security training program but failed to train four or more individuals with authorized electronic or authorized unescorted physical access within 15 calendar months of the previous training completion date, and did not identify, assess and correct the deficiencies. (2.3)