Control17.md

Critical Control 17 - Security Skills Assessment and Appropriate Training to Fill Gaps

Identify the specific knowledge, skills, and abilities needed to support defense of the enterprise; develop and execute an integrated plan to assess, identify and remediate gaps, through policy, organizational planning, training, and awareness programs for all functional roles in the organization.

PR.AT-1 All users are informed and trained

PR.AT-2 Privileged users understand their roles and responsibilities

PR.AT-3 Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilities

PR.AT-4 Senior executives understand their roles and responsibilities

PR.AT-5 Physical and cybersecurity personnel understand their roles and responsibilities