program for personnel having program on an annual or document an annual authorized cyber or authorized basis. cyber security training unescorted physical access to program for personnel Critical Cyber Assets. The cyber having authorized security training program shall be cyber or authorized reviewed annually, at a unescorted physical minimum, and shall be updated access to Critical Cyber whenever necessary. Assets. This program will ensure that all R2.1. N/A N/A N/A Not all personnel personnel having such access to having authorized Critical Cyber Assets, including cyber or unescorted contractors and service vendors, physical access to are trained prior to their being Critical Cyber Assets, granted such access except in including contractors specified circumstances such as and service vendors, an emergency. were trained prior to their being granted such access except in specified circumstances such as an emergency. Training shall cover the policies, R2.2. N/A N/A N/A The training does not access controls, and procedures include one or more of as developed for the Critical the minimum topics as Cyber Assets covered by detailed in R2.2.1, and include, at a R2.2.2, R2.2.3, R2.2.4. minimum, the following required items appropriate to personnel roles and responsibilities: R2.2.1. The proper use of Critical Cyber N/A N/A N/A N/A Assets; R2.2.2. Physical and electronic access N/A N/A N/A N/A controls to Critical Cyber Assets; R2.2.3. The proper handling of Critical N/A N/A N/A N/A Cyber Asset information; and,
program for personnel having authorized cyber or authorized unescorted physical access to Critical Cyber Assets. The cyber security training program shall be reviewed annually, at a minimum, and shall be updated whenever necessary. program on an annual basis. or document an annual cyber security training program for personnel having authorized cyber or authorized unescorted physical access to Critical Cyber Assets. R2.1. This program will ensure that all personnel having such access to Critical Cyber Assets, including contractors and service vendors, are trained prior to their being granted such access except in specified circumstances such as an emergency. N/A N/A N/A Not all personnel having authorized cyber or unescorted physical access to Critical Cyber Assets, including contractors and service vendors, were trained prior to their being granted such access except in specified circumstances such as an emergency. R2.2. Training shall cover the policies, access controls, and procedures as developed for the Critical Cyber Assets covered by and include, at a minimum, the following required items appropriate to personnel roles and responsibilities: N/A N/A N/A The training does not include one or more of the minimum topics as detailed in R2.2.1, R2.2.2, R2.2.3, R2.2.4. R2.2.1. The proper use of Critical Cyber Assets; N/A N/A N/A N/A R2.2.2. Physical and electronic access controls to Critical Cyber Assets; N/A N/A N/A N/A R2.2.3. The proper handling of Critical Cyber Asset information; and, N/A N/A N/A N/A
VSL_Matrix_Complete_2016_01_27.docx