FedRAMP Controls / AT
AT-2(3) Social Engineering and Mining
Family AT
Baselines moderate
Mapped KSIs 2
Control statement
Provide literacy training on recognizing and reporting potential and actual instances of social engineering and social mining.
Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is
preserved in the catalog database.
Covered by these Key Security Indicators
| KSI | Title | Category |
|---|---|---|
| KSI-CED-01 | General Training _Persistently_ review the effectiveness of training given to all employees on policies, procedures, and security-related topics. | Cybersecurity Education |
| KSI-CED-02 | Role-Specific Training _Persistently_ review the effectiveness of role-specific training given to employees in high risk roles, including at least roles with privileged access. | Cybersecurity Education |