Imported from node011/Bounty-Reaper (.bountyreper/skill/NIST/CSF_v2.0/PR_protect/PR.AT-02_prat-02/SKILL.md). Install upstream with npx skills add node011/Bounty-Reaper --skill PR.AT-02_prat-02. Copyright stays with the author.

PR.AT-02 PR.AT-02

Subcategory of: Awareness and Training (PR.AT)

High-Level Description

Function: PROTECT (PR) Framework: NIST Cybersecurity Framework v2.0

Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind

What to Check

• Verify PR.AT-02 PR.AT-02 outcome is achieved
• Review documentation and evidence for PR.AT-02
• Assess organizational maturity for PROTECT function
• Map to SP 800-53 controls that satisfy PR.AT-02

How to Test

Step 1: Identify Current Profile

Determine the organization's current and target CSF profile tier for PR.AT-02.

Step 2: Assess Outcome Achievement

# Review organizational policies and procedures
# Check for evidence that PR.AT-02 outcome is met
# Interview stakeholders responsible for PROTECT

Step 3: Map to Technical Controls

Identify which SP 800-53 controls implement this CSF outcome and verify their operating effectiveness.

Tools

Remediation Guide

Achieve the PR.AT-02 PR.AT-02 outcome:

Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind

Risk Assessment

CWE Categories

References

• NIST CSF v2.0
• NIST CSF v2.0 Reference Tool
• CSF 2.0 Quick Start Guides

Checklist

• Current profile tier assessed
• Target profile tier defined
• Gap analysis completed
• SP 800-53 control mapping verified
• Implementation roadmap exists