AT - Awareness and Training

The AT control family focuses on establishing and maintaining a security and privacy awareness program for all personnel, ensuring they understand relevant policies, procedures, and their responsibilities. It requires role-based training, regular refreshers, and assessment of the program's effectiveness to reduce human-related risks.