Skip to content

Cybersecurity Education

Reviewing All Training

KSI-CED-RAT

Changelog:

  • 2026-05-04: Initial reset for the Consolidated Rules for 2026 Public Preview.

The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.

Related SP 800-53 Controls: CP-3, IR-2, PS-6, AT-2, AT-2.2, AT-2.3, AT-3.5, AT-4, IR-2.3, AT-3, SR-11.1

Terms: Incident, Persistently, Vulnerability Response

Comments