NIST – EP.2 – Quiz

_________ is/are exempt from training and awareness.

Training should be provided to ________ system users at ________ intervals.

Training activities should be documented and _______ .

Awareness measures can include sending email _______ to personnel.

Lessons learned from _______ incidents can be incorporated into training.

Role-based training content should be built for each personnel’s role and _______ .

Training records may be kept by _______ .

The controls in the Awareness and Training family provide _______ .