← NIST CSF 2.0 in plain English

PR.AT-01

Protect / Awareness and Training

Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind.

Think of it likeTeaching everyone in the family how to safely use the stove.

In plain English

The family makes sure everyone knows how to safely perform basic tasks in the home, like using the stove, to prevent accidents.

Related CIS safeguards (unofficial mapping)

CIS 14.1: Establish and Maintain a Security Awareness ProgramCIS 14.2: Train Workforce Members to Recognize Social Engineering AttacksCIS 14.3: Train Workforce Members on Authentication Best PracticesCIS 14.4: Train Workforce on Data Handling Best PracticesCIS 14.5: Train Workforce Members on Causes of Unintentional Data ExposureCIS 14.6: Train Workforce Members on Recognizing and Reporting Security IncidentsCIS 14.7: Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security UpdatesCIS 14.8: Train Workforce on the Dangers of Connecting to and Transmitting Enterprise Data Over Insecure Networks