The organisation documents and monitors security and privacy training activities, both awareness and role-based, and retains individual training records for a set period. The GC discussion points to Library and Archives Canada guidance on retention. No enhancements.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.