03.02.02 Role-Based Training

This policy establishes requirements for providing role-based security training to organizational personnel to ensure they have the necessary knowledge and skills to perform their duties securely and protect Controlled Unclassified Information (CUI).

• A.03.02.02.ODP[01]: the frequency at which to provide role-based security training to assigned personnel after initial training is defined.
• A.03.02.02.ODP[02]: events that require role-based security training are defined.
• A.03.02.02.ODP[03]: the frequency at which to update role-based security training content is defined.
• A.03.02.02.ODP[04]: events that require role-based security training content updates are defined.
• A.03.02.02.a.01[01]: role-based security training is provided to organizational personnel before authorizing access to the system or CUI.
• A.03.02.02.a.01[02]: role-based security training is provided to organizational personnel before performing assigned duties.
• A.03.02.02.a.01[03]: role-based security training is provided to organizational personnel <A.03.02.02.ODP[01]: frequency> after initial training.
• A.03.02.02.a.02: role-based security training is provided to organizational personnel when required by system changes or following <A.03.02.02.ODP[02]: events>.
• A.03.02.02.b[01]: role-based security training content is updated <A.03.02.02.ODP[03]: frequency>.
• A.03.02.02.b[02]: role-based security training content is updated following <A.03.02.02.ODP[04]: events>.