{"id":805,"date":"2024-04-24T17:18:09","date_gmt":"2024-04-24T17:18:09","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=805"},"modified":"2025-05-30T14:07:39","modified_gmt":"2025-05-30T14:07:39","slug":"at-2-literacy-training-awareness","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/awareness-and-training-at\/at-2-literacy-training-awareness\/","title":{"rendered":"AT-2: Literacy Training and Awareness"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">AT-2: Literacy Training and Awareness<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>NIST Baseline: &nbsp;<\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>DIR Required By:<\/strong> 07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:16px\"><strong>Review Date: \u00a0<\/strong>05\/30\/2025\u00a0<\/h2>\n\n\n\n<ul class=\"wp-block-list its-nested-list\">\n<li>Tarleton State University (Tarleton) administers security and privacy awareness training in compliance with the requirements of Texas Administration Code (TAC) <a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" data-type=\"link\" data-id=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a72054.5191<\/a>\u2013<a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" data-type=\"link\" data-id=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" target=\"_blank\" rel=\"noreferrer noopener\">.5192<\/a> and <a href=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" data-type=\"link\" data-id=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Texas A&amp;M University System (TAMUS) Regulation 29.01.03, Information Security<\/a>, for all employees including managers, senior executives, contractors, and other sponsored third-party vendors and\/or guest users.\u00a0\u00a0\u00a0<\/li>\n\n\n\n<li>For all Tarleton employees, training should be completed through the TAMUS-approved training system, currently TrainTraq, and recorded.&nbsp;&nbsp;\n<ul class=\"wp-block-list\">\n<li>All employees of Tarleton\/TAMUS-owned information resources must complete a Tarleton approved Information Security Awareness (ISA) course immediately upon hire and annually thereafter.&nbsp;&nbsp;<\/li>\n\n\n\n<li>If the training material changes substantially, TAMUS or Tarleton\u2019s Chief Information Security Officer (CISO) may choose to have all employees, or a specific segment of employees, retake the training out-of-cycle.&nbsp; Additional ISA or other security-related training can be assigned to employees out-of-cycle per the Tarleton CISO\u2019s discretion.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>For all third-party vendors\/contractors\/auditors (etc.) that require a Tarleton account and\/or will be accessing Tarleton\/TAMUS information resources, training should be completed through the TAMUS-approved training system, currently TrainTraq, and\/or through another DIR-approved ISA training course prior to receiving their Tarleton vendor account credentials and annually thereafter, as applicable for their continued contract work with Tarleton.\u00a0 If ISA training is completed through another DIR-approved training course, proof of training completion must be provided to Tarleton\u2019s Office of Innovative Technology Solutions (OITS) \u2013 Security Team or CISO.\u00a0 It is up to the CISO\u2019s discretion as to whether the vendor\u2019s provided ISA training completion through another DIR-approved training course will be accepted or if Tarleton\/TAMUS ISA training must be completed by the vendor.\u00a0\u00a0<\/li>\n\n\n\n<li>The CISO may use other communications channels (such as email and awareness campaigns such as National Cyber Security Awareness Month) to inform users of information security awareness topics.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Training and awareness content will be updated periodically to incorporate lessons learned from internal or external security incidents.&nbsp;<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator alignfull has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\"><strong>References\/Additional Resources<\/strong><\/h3>\n\n\n\n<p><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.519.%20%20STATE%20CERTIFIED%20CYBERSECURITY%20TRAINING%20PROGRAMS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.519<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.5191<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.5192<\/a>&nbsp;<\/p>\n\n\n\n<p><a href=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" data-type=\"link\" data-id=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">TAMUS Regulation 29.01.03, Information Security<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AT-2: Literacy Training and Awareness NIST Baseline: &nbsp;Low&nbsp; DIR Required By: 07\/20\/2023&nbsp; Review Date: \u00a005\/30\/2025\u00a0 References\/Additional Resources Tex. Gov\u2019t Code Section 2054.519&nbsp; Tex. Gov\u2019t Code Section 2054.5191&nbsp; Tex. Gov\u2019t Code &#8230;<\/p>\n","protected":false},"author":62,"featured_media":580,"parent":780,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-805","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/kyle-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"kyle"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 11 months ago"},"absolute_dates":{"created":"Posted on April 24, 2024","modified":"Updated on May 30, 2025"},"absolute_dates_time":{"created":"Posted on April 24, 2024 5:18 pm","modified":"Updated on May 30, 2025 2:07 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=805"}],"version-history":[{"count":1,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805\/revisions"}],"predecessor-version":[{"id":2664,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805\/revisions\/2664"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/780"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}