Awareness and Training (AT)

The AT family in FedRAMP establishes the security awareness and training requirements for cloud service providers, specifying that personnel must receive ongoing security education and role-based training. It also mandates documentation of training completion and periodic refresher activities to maintain compliance.