What to Provide
Security awareness training completion log, with emphasis on current employees sampled.
For each current employee sampled, the evidence should demonstrate who has completed training and when.
NOTE: The audit team will communicate sample selections once they have been finalized. Please refrain from attaching evidence in this ER until samples have been communicated.
Evidence Format
Word/PDF document, exported images in a common image file type (i.e. .jpg, .png, .pdf), Excel/.csv export from the source system.
Associated Unified Control ID | Associated Framework Control |
CTRL-245 | LCL-9 |