role-based training

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Note: NOTE: In addition, SP 800-53r5 control AT-3 provides the following definition for Role-Based Training: “Comprehensive role-based training addresses management, operational, and technical roles and responsibilities covering physical, personnel, and technical controls. Role-based training also includes policies, procedures, tools, methods, and artifacts for the cybersecurity and privacy roles defined. Organizations provide the training necessary for individuals to fulfill their responsibilities related to operations and supply chain risk management within the context of organizational cybersecurity and privacy programs. Role-based training also applies to contractors who provide services to federal agencies.”

Definitions:

A multi-step process in the learning program that begins with defining the significant cybersecurity or privacy work roles in the organization and identifying the personnel aligned to those designated work roles. Learning materials are then assigned, acquired, or developed based on the tasks necessary to perform the work role. (See the NICE Framework for “work role.”)
Sources:
NIST SP 800-50r1

Glossary Comments

Comments about specific definitions should be sent to the authors of the linked Source publication. For NIST publications, an email is usually found within the document.

Comments about the glossary's presentation and functionality should be sent to [email protected].

See NISTIR 7298 Rev. 3 for additional details.