OSCAL Parameters within AT-3.5: Processing Personally Identifiable Information
personnel or roles to be provided with initial and refresher training in the employment and operation of personally identifiable information processing and transparency controls is/are defined;