NIST SP 800-181 NICE-OG-WRL-005: Cybersecurity Instruction

What else in your programme already covers this

This control maps to 28 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 5 controls

NIST800-AT-2 AT-2 Literacy Training and Awareness
NIST800-AT-3 AT-3 Role-based Training
NIST800-AT-6 AT-6 Training Feedback
NIST800-PM-13 PM-13 Security and Privacy Workforce
NIST800-PM-14 PM-14 Testing, Training, and Monitoring

CIS Controls v8 · 3 controls

CIS-14.1 Establish and Maintain a Security Awareness Program
CIS-14.9 Conduct Role-Specific Security Awareness and Skills Training
CIS-16.9 Train Developers in Application Security Concepts and Secure Coding

PCI DSS 4.0 · 3 controls

12.10.4 12.10.4 Periodic training for incident response personnel
12.6.1 12.6.1 Formal security awareness program
12.6.3 12.6.3 Security awareness training on hire and annually with acknowledgment

CMMC 2.0 · 2 controls

AT.L2-3.2.1 Role-Based Risk Awareness
AT.L2-3.2.2 Role-Based Training

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-HRS-11 Security Awareness Training
CCM-HRS-12 Personal and Sensitive Data Awareness and Training

FedRAMP High · 2 controls

AT-2 Literacy Training and Awareness
AT-3 Role-Based Training

FedRAMP Moderate · 2 controls

AT-2 Literacy Training and Awareness
AT-3 Role-Based Training

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-PR.AT-01 Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
NIST-CSF-PR.AT-02 Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind

NIST SP 800-171 Rev 3 · 2 controls

03.02.01 Literacy Training and Awareness
03.02.02 Role-Based Training

HIPAA Security Rule · 1 control

164.308(a)(5)(i) Security Awareness and Training (Standard)

ISO 27001:2022 · 1 control

6.3 Information security awareness, education and training

ISO 27002:2022 · 1 control

6.3 Information security awareness, education and training

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(5)(i) Security Awareness and Training (Standard)

SOC 2 · 1 control

SOC2-CC1.4 CC1.4 Attracting, developing and retaining competent people (COSO principle 4)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.