U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-16 Rev. 1 (Draft)

Information Security Training Requirements: A Role- and Performance-Based Model

Date Published: March 2009
Comments Due: June 26, 2009 (public comment period is CLOSED)
Email Questions to:


Mark Wilson (NIST), Kevin Stine (NIST), Pauline Bowen (NIST)


The comprehensive training methodology provided in this publication is intended to be used by federal information security professionals and instructional design specialists to design (1) role-based training courses or modules for personnel who have been identified as having significant responsibilities for information security, and (2) a basics and literacy course for all users of information systems. We encourage readers to pay special attention to the Notes to Reviewers section, as we are looking for feedback on the many changes we have made to this document.



information security; role-based training
Control Families

None selected


Draft SP 800-16 Rev. 1

Supplemental Material:
None available

Document History:
03/20/09: SP 800-16 Rev. 1 (Draft)
10/24/13: SP 800-16 Rev. 1 (Draft)
03/14/14: SP 800-16 Rev. 1 (Draft)


Security and Privacy
awareness training & education