Today we’re going to talk about one of the domains, awareness and training, and if you are going to seek a DoD contract you’re going to be required to be a minimum level one CMMC or for a prime contractor you’ll need to be at a level three.

Awareness and training, or AT as it’s referred to, does not have a level one requirement, so today I’m just going to talk to you about level two and level three requirements.

So let’s start with AT level two practices or controls. This is an area where you need to be focused on ensuring that the manager, systems administrator, users of the organizational systems are made aware of security risks and their activities to make sure they understand relevant policy standards and procedures.

So, hopefully everybody would understand that you should have an awareness and you should have training, and you should understand why you have this training, hence the policy standards and procedures. Read the complete script.

View Transcript

Notify me when new CMMC Training vlogs are posted

* indicates required