Awareness and Training
CMMC Assessment with IntelComp
IntelComp is an independent compliance management platform designed to support businesses in navigating and preparing for cybersecurity frameworks, including CMMC 2.0. While not affiliated with or endorsed by the U.S. Department of Defense (DoD), CMMC-AB, or NIST, IntelComp offers tools and guidance aligned with standards such as NIST SP 800-171A to help organizations strengthen security posture and readiness. All references to government standards are for informational purposes only. IntelComp does not provide certification but empowers you with the resources to pursue compliance confidently and effectively.
CMMC Awareness and Training (AT) Overview
The Awareness and Training (AT) domain in CMMC ensures that personnel are equipped with the knowledge and skills needed to protect sensitive information and follow cybersecurity policies effectively.
Key objectives include:
-
• Promoting cybersecurity awareness across all roles
• Training users on recognizing and reporting threats (e.g., phishing, insider risks)
• Ensuring that security responsibilities are clearly understood
• Providing role-based training for individuals with elevated access or responsibilities
By fostering a security-conscious workforce, the AT domain helps reduce human-related vulnerabilities and supports long-term compliance with CMMC 2.0 and related standards.
CMMC Awareness and Training (AT) Overview
The Awareness and Training (AT) domain in CMMC ensures that personnel are equipped with the knowledge and skills needed to protect sensitive information and follow cybersecurity policies effectively.
Key objectives include:
-
• Promoting cybersecurity awareness across all roles
• Training users on recognizing and reporting threats (e.g., phishing, insider risks)
• Ensuring that security responsibilities are clearly understood
• Providing role-based training for individuals with elevated access or responsibilities
By fostering a security-conscious workforce, the AT domain helps reduce human-related vulnerabilities and supports long-term compliance with CMMC 2.0 and related standards.
P - Programs, Policies, Procedures (SOPs) | A - Artifacts/Records | T - Training Materials/Comprehension Quiz
| Control ID | PAT | Security Requirement |
|---|---|---|
| 3.2.1.a | P | CUI Security Awareness & Risk Management |
| A | Security Awareness & Risk Management Form | |
| T | CUI Security Awareness & Risk Management Policy Training Material and Comprehension Quiz | |
| 3.2.1.b | P | System Security Policies & Awareness |
| A | Incident Response Checklist | |
| T | System Security Policies & Awareness Policy Training Material and Comprehension Quiz | |
| 3.2.1.c | P | Security Awareness Training |
| A | Incident Response Form | |
| T | Security Awareness Training Policy Training Material and Comprehension Quiz | |
| 3.2.1.d | P | System Security Awareness & Compliance |
| A | System Security Awareness & Compliance Form | |
| T | System Security Awareness & Compliance Policy Training Material and Comprehension Quiz | |
| 3.2.2.a | P | Information Security-Related Duties, Roles, and Responsibilities |
| A | Information Security Form | |
| T | Role-Based Training Policy Information Security Form |
|
| 3.2.2.b | P | Assigning Information Security-Related Duties, Roles, and Responsibilities to Designated Personnel |
| A | Duties, Roles, and Responsibilities Policy Checklist | |
| T | Information Security-Related Duties, Roles, and Responsibilities Policy Training Material and Comprehension Quiz | |
| 3.2.2.c | P | Ensuring Personnel Are Adequately Trained for Information Security Duties |
| A | Information Security Form | |
| T | Ensuring Personnel Are Adequately Trained for Information Security Duties Policy Training Material and Comprehension Quiz | |
| 3.2.3.a | P | Identifying Potential Indicators of Insider Threats |
| A | Insider Threats Checklist | |
| T | Identifying Potential Indicators of Insider Threats Policy Training Material and Comprehension Quiz | |
| 3.2.3.b | P | Security Awareness Training on Recognizing and Reporting Potential Indicators of Insider Threats |
| A | Security Awareness Training Form | |
| T | Security Awareness Training on Recognizing and Reporting Potential Indicators of Insider Threats Policy Training Material and Comprehension Quiz |