SAT

Security Awareness & Training

17 controls

Foster a cybersecurity & data privacy-minded workforce through ongoing user education about evolving threats, compliance obligations and secure workplace practices.

SCF #	Control Name	Weight	NIST CSF	Frameworks
SAT-01	Cybersecurity & Data Protection-Minded Workforce	8 — High	Govern	131
SAT-01.1	Maintaining Workforce Development Relevancy	6 — Medium	Identify	4
SAT-02	Cybersecurity & Data Protection Awareness Training	8 — High	Protect	114
SAT-02.1	Simulated Cyber Attack Scenario Training	3 — Low	Protect	10
SAT-02.2	Social Engineering & Mining	5 — Medium	Protect	37
SAT-03	Role-Based Cybersecurity & Data Protection Training	8 — High	Protect	129
SAT-03.1	Practical Exercises	3 — Low	Protect	18
SAT-03.2	Suspicious Communications & Anomalous System Behavior	9 — Critical	Protect	45
SAT-03.3	Sensitive / Regulated Data Storage, Handling & Processing	9 — Critical	Protect	54
SAT-03.4	Vendor Cybersecurity & Data Protection Training	7 — High	Protect	3
SAT-03.5	Privileged Users	9 — Critical	Protect	31
SAT-03.6	Cyber Threat Environment	8 — High	Identify	37
SAT-03.7	Continuing Professional Education (CPE) - Cybersecurity & Data Protection Personnel	8 — High	Identify	10
SAT-03.8	Continuing Professional Education (CPE) - DevOps Personnel	8 — High	Identify	8
SAT-03.9	Counterintelligence Training	1 — Low	Identify	2
SAT-04	Cybersecurity & Data Protection Training Records	9 — Critical	Protect	57
SAT-05	Cybersecurity Knowledge Sharing	3 — Low	Identify	1

The Secure Controls Framework (SCF) is maintained by SCF Council. Use of SCF content is subject to the SCF Terms & Conditions.

Security Awareness & Training

Manage SCF Controls in SCF Connect