Awareness & Training
That the people handling CUI know the risks and their responsibilities, including insider-threat awareness.
The 3 requirements, in plain language.
Ensure that managers, systems administrators, and users of organizational systems are made aware of the security risks associated with their activities and of the applicable policies, standards, and procedures related to the security of those systems
Ensure that personnel are trained to carry out their assigned information security-related duties and responsibilities
Provide security awareness training on recognizing and reporting potential indicators of insider threat
One owner across the whole family — built, run, and proven.
Enclave builds these controls into the boundary as code; Cadence keeps them enforced between assessments; Attest proves them to the C3PAO against every objective.
See all fourteen families →Not sure which families your contract puts in scope?
A readiness check maps your environment to all 110 controls and tells you exactly where you stand.