TA-09—Security Champion Training

>Control Description

Service teams select a "Security Champion" to ensure security engagement responsibilities are assigned and tracked to completion; Security Champions receive training on how to execute responsibilities.

Theme

People

Type

Preventive

Policy/Standard

Training & Awareness Procedure

>Implementation Guidance

1. Ensure there is a process by which the service teams select a "Security Champion" and they complete their security champions training. 2. Maintain training records for the Security Champions.

>Testing Procedure

1. Inspect documentation related to Security Champions and verify that they are defined for selected service teams. 2. Inspect training completion records for a sample of Security Champions.