HOME

AT-4

AT-4 H M L
Description

The organization:
a. Documents and monitors individual information system security training activities including basic security awareness training and specific information system security training; and
b. Retains individual training records for [Assignment: organization-defined time period].

FedRAMP
  • H AT-4 (b) [five (5) years or 5 years after completion of a specific training program]
  • M AT-4 (b) [At least one year]
  • L AT-4 (b) [At least one year]
DISA Cloud Computing SRG

b. at least 5 years or 5 years after completion of a specific training program

Source:
DoD RMF TAG

Supplemental Guidance

Documentation for specialized training may be maintained by individual supervisors at the option of the organization.

Related Controls