AT-2 Security Awareness Training

Description

Organizations determine the appropriate content of security awareness training and security awareness techniques based on the specific organizational requirements and the information systems to which personnel have authorized access.

The content includes a basic understanding of the need for information security and user actions to maintain security and to respond to suspected security incidents. The content also addresses awareness of the need for operations security.

Security awareness techniques can include, for example, displaying posters, offering supplies inscribed with security reminders, generating email advisories/notices from senior organizational officials, displaying logon screen messages, and conducting information security awareness events.

Applicability

This Control applies to all TAMU-CC personnel who use University information resources.

Implementation

TAMU-CC through the Chief Information Security and Privacy Officer (CISPO) shall provide basic security awareness training to information system users including employees, contingent workers, and affiliates. Such workforce members (includes, but is not limited to managers, senior executives, and contractors) (TAMU-CC Procedure 33.05.02.C0.01, Required Training for Employees and Affiliates [TAMU-CC 33.05.02.C0.01 [PDF]]). Basic security awareness training shall include:

As part of initial training for new users, TAMU-CC shall conduct new employee orientation to introduce information security awareness and inform new employees of information security policies and procedures;
When required by information systems, TAMU System, state, federal, and/or regulatory requirements change;
Annually shall provide an ongoing information security awareness education program for all users; and
Refresher trainings following security or privacy events when deemed necessary by the Chief Information Security and Privacy Officer.

Revision History

Last Updated: February 21, 2025

Previous Versions:

June 29, 2023
May 31, 2022
March 25, 2021
September 16, 2019