Skip to main content

AT-4 Security Training Records

Description​

The University maintains records of information security training and monitors them for compliance.

Applicability​

  • The Chief Information Security Officer (CISO), or designee, is responsible for ensuring that the measures described in this Control are implemented.

Implementation​

  • 1It is the responsibility of the CISO, or designee, to:

    • 1.1Document and monitor staff information security training activities, including;

      • 1.1.1Security Awareness Training; and
      • 1.1.2Role-based information resource security training as specified in Security Control AT-3.

    • 1.2Retain staff training records based on university document retention policies.