{"id":805,"date":"2024-04-24T17:18:09","date_gmt":"2024-04-24T17:18:09","guid":{"rendered":"https:\/\/www.tarleton.edu\/security-controls-catalog\/?page_id=805"},"modified":"2026-08-25T19:47:52","modified_gmt":"2026-08-25T19:47:52","slug":"at-2-literacy-training-awareness","status":"publish","type":"page","link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/awareness-and-training-at\/at-2-literacy-training-awareness\/","title":{"rendered":"AT-2: Literacy Training and Awareness"},"content":{"rendered":"\n<h1 class=\"wp-block-heading has-large-font-size\">AT-2: Literacy Training and Awareness<\/h1>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>NIST Baseline: &nbsp;<\/strong>Low&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>DIR Required By:<\/strong> 07\/20\/2023&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" style=\"font-size:clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.294), 16px);\"><strong>Review Date: \u00a0<\/strong>08\/25\/2026<\/h2>\n\n\n\n<ul class=\"wp-block-list its-nested-list\">\n<li>Tarleton State University (Tarleton) administers security and privacy awareness training in compliance with the requirements of Texas Government (Gov&#8217;t) Code <a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" data-type=\"link\" data-id=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a72054.5191<\/a>\u2013<a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" data-type=\"link\" data-id=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" target=\"_blank\" rel=\"noreferrer noopener\">.5192<\/a> and <a href=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" data-type=\"link\" data-id=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Texas A&amp;M University System (TAMUS) Regulation 29.01.03, Information Security<\/a>, for all employees including managers, senior executives, contractors, and other sponsored third-party vendors and\/or guest users.\u00a0\u00a0\u00a0<\/li>\n\n\n\n<li>For all Tarleton employees, training should be completed through the TAMUS-approved training system, currently TrainTraq, and recorded.&nbsp;&nbsp;\n<ul class=\"wp-block-list\">\n<li>All employees of Tarleton\/TAMUS-owned information resources must complete a Tarleton approved Information Security Awareness (ISA) course immediately upon hire and annually thereafter.&nbsp;&nbsp;<\/li>\n\n\n\n<li>If the training material changes substantially, TAMUS or Tarleton\u2019s Chief Information Security Officer (CISO) may choose to have all employees, or a specific segment of employees, retake the training out-of-cycle.&nbsp; Additional ISA or other security-related training can be assigned to employees out-of-cycle per the Tarleton CISO\u2019s discretion.&nbsp;&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>For all third-party vendors\/contractors\/auditors (etc.) that require a Tarleton account and\/or will be accessing Tarleton\/TAMUS information resources, training should be completed through the TAMUS-approved training system, currently TrainTraq, and\/or through another DIR-approved ISA training course prior to receiving their Tarleton vendor account credentials and annually thereafter, as applicable for their continued contract work with Tarleton.&nbsp; If ISA training is completed through another DIR-approved training course, proof of training completion must be provided to Tarleton\u2019s Office of Innovative Technology Solutions (OITS) \u2013 Security Team or CISO.&nbsp; It is up to the CISO\u2019s discretion as to whether the vendor\u2019s provided ISA training completion through another DIR-approved training course will be accepted or if Tarleton\/TAMUS ISA training must be completed by the vendor.&nbsp;&nbsp;<\/li>\n\n\n\n<li>The CISO may use other communications channels (such as email and awareness campaigns such as National Cyber Security Awareness Month) to inform users of information security awareness topics.&nbsp;&nbsp;<\/li>\n\n\n\n<li>Training and awareness content will be updated periodically to incorporate lessons learned from internal or external security incidents.&nbsp;<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator aligncenter has-text-color has-tarleton-purple-color has-alpha-channel-opacity has-tarleton-purple-background-color has-background is-style-wide\"\/>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\"><strong>References\/Additional Resources<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.519.%20%20STATE%20CERTIFIED%20CYBERSECURITY%20TRAINING%20PROGRAMS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.519<\/a>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5191.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20EMPLOYEES%20AND%20OFFICIALS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.5191<\/a>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/statutes.capitol.texas.gov\/Docs\/GV\/htm\/GV.2054.htm#2054.138:~:text=Sec.%202054.5192.%20%20CYBERSECURITY%20TRAINING%20REQUIRED%3A%20CERTAIN%20STATE%20CONTRACTORS.\" target=\"_blank\" rel=\"noreferrer noopener\">Tex. Gov\u2019t Code Section 2054.5192<\/a>&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" data-type=\"link\" data-id=\"https:\/\/policies.tamus.edu\/29-01-03.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">TAMUS Regulation 29.01.03, Information Security<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AT-2: Literacy Training and Awareness NIST Baseline: &nbsp;Low&nbsp; DIR Required By: 07\/20\/2023&nbsp; Review Date: \u00a008\/25\/2026 References\/Additional Resources Tex. Gov\u2019t Code Section 2054.519&nbsp; Tex. Gov\u2019t Code Section 2054.5191&nbsp; Tex. Gov\u2019t Code &#8230;<\/p>\n","protected":false},"author":62,"featured_media":580,"parent":780,"menu_order":2,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"class_list":["post-805","page","type-page","status-publish","has-post-thumbnail","hentry"],"acf":[],"coauthors":[],"author_meta":{"author_link":"https:\/\/www.tarleton.edu\/security-controls-catalog\/author\/kyle-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-2-3\/","display_name":"kyle"},"relative_dates":{"created":"Posted 2 years ago","modified":"Updated 2 weeks ago"},"absolute_dates":{"created":"Posted on April 24, 2024","modified":"Updated on August 25, 2026"},"absolute_dates_time":{"created":"Posted on April 24, 2024 5:18 pm","modified":"Updated on August 25, 2026 7:47 pm"},"featured_img_caption":"","featured_img":false,"series_order":"","_links":{"self":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/users\/62"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/comments?post=805"}],"version-history":[{"count":2,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805\/revisions"}],"predecessor-version":[{"id":2707,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/805\/revisions\/2707"}],"up":[{"embeddable":true,"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/pages\/780"}],"wp:attachment":[{"href":"https:\/\/www.tarleton.edu\/security-controls-catalog\/wp-json\/wp\/v2\/media?parent=805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}