AT-3: Role-based Training

roles and responsibilities for role-based security training are defined;

roles and responsibilities for role-based privacy training are defined;

the frequency at which to update role-based training content is defined;

events that require role-based training content to be updated are defined;

the frequency at which to provide role-based security and privacy training to assigned personnel after initial training is defined;