Back

Hire third parties to conduct training, as necessary.


CONTROL ID
13167
CONTROL TYPE
Human Resources Management
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Conduct tests and evaluate training., CC ID: 06672

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Basic security awareness training shall be required within six months of initial assignment, and biennially thereafter, for all personnel who have access to CJI to include all personnel who have unescorted access to a physically secure location. The CSO/SIB Chief may accept the documentation of the … (§ 5.2.1 ¶ 1, Criminal Justice Information Services (CJIS) Security Policy, CJISD-ITS-DOC-08140-5.8, Version 5.8)
  • If directors are not qualified in relation to IT risks, determine if they bring in outside independent consultants to support their oversight efforts through education and training. (TIER I OBJECTIVES AND PROCEDURES Objective 3:1. Bullet 2, FFIEC IT Examination Handbook - Audit, April 2012)