AT - Awareness and Training (Level 2)

At Level 2, organizations must deliver role-specific cybersecurity awareness and training that includes periodic refresher sessions, assessment of comprehension, and documented proof of participation. The program goes beyond basic security basics to cover policies, incident response procedures, and the responsibilities of privileged users.