{"data":{"id":"AT-06","name":"Training Feedback","family":"AT","family_name":"Awareness and Training","withdrawn":false,"description":"Provide feedback on organizational training results to the following personnel [Assignment: organization-defined frequency]: [Assignment: organization-defined personnel].","supplemental_guidance":"Training feedback includes awareness training results and role-based training results. Training results, especially failures of personnel in critical roles, can be indicative of a potentially serious problem. Therefore, it is important that senior managers are made aware of such situations so that they can take appropriate response actions. Training feedback supports the evaluation and update of organizational training described in AT-02b and AT-03b.","enhancements":[],"baseline_low":false,"baseline_moderate":false,"baseline_high":false,"nist_800_53":{"rev5":{"id":"AT-06","name":"Training Feedback","description":"Provide feedback on organizational training results to the following personnel [Assignment: organization-defined frequency]: [Assignment: organization-defined personnel].","discussion":"Training feedback includes awareness training results and role-based training results. Training results, especially failures of personnel in critical roles, can be indicative of a potentially serious problem. Therefore, it is important that senior managers are made aware of such situations so that they can take appropriate response actions. Training feedback supports the evaluation and update of organizational training described in AT-02b and AT-03b.","related_controls":[],"baseline_low":null,"baseline_moderate":null,"baseline_high":null,"baseline_privacy":null,"new_in_rev5":true,"changes_from_rev4":"New control in Rev 5."}},"compliance_mappings":{"iso_27001_2022":["7.2","A.6.3"],"iso_27002_2022":["6.3"],"cobit_2019":["APO07","BAI08"],"pci_dss_v4":[],"nist_csf_2":["ID.IM-03","PR.AT-01","PR.AT-02"],"cis_controls_v8":["CIS 14","CIS 14.6","CIS 14.9"],"soc2_tsc":["CC1.4","CC1.4-POF2"],"finos_ccc":[],"iso_42001_2023":["A.4.6"],"iec_62443":[],"asd_e8":[],"nis2":["Art. 21(2)(g)"],"apra_cps_234":["Para 19-20"],"mas_trm":[],"pra_op_resilience":["SS1/21-6.2"],"bsi_grundschutz":["ORP.3"],"anssi":["Hygiene.1","RGS.1.2","SecNumCloud.8.3"],"osfi_b13":["B-13.1.1"],"finma_circular":["IV.B.a(47)","IV.B.a(48)","IV.B.a(49)","IV.B.b(50)","IV.B.b(51)","IV.E(92)","IV.E(93)","IV.F(97)"],"gdpr":["Art.39(1)(b)","Art.47(2)(n)"],"dora":["Art.5(4)","Art.13(6)"],"bio2":["6.3"],"rbi_csf":["Annex1.23"],"fisc":["FISC.O8"],"lgpd_bcb":["BCB.Art.4","LGPD.Art.50"],"hkma_tme1":[],"mlps_2":[],"dnb_good_practice":["DNB.9.1","DNB.9.3"],"cra":[],"swift_cscf":[],"cbb_tm":["TM-3"],"cbuae":["CR-11"],"nca_ecc":["1-10"],"qatar_nia":["HR"],"sama_csf":["1.6"],"uae_ia":["T5"],"bog_cisd":["CISD-XV"],"bom_ctrm":["3.8"],"cbe_csf":["GOV-4"],"cbn_csf":["Part8"],"sa_js2":["JS2-8.6"],"bot_cyber":["Ch7.1"],"cpmi_pfmi":["CG.GOV","CG.LE"],"eba_ict":["3.4.7"],"ecb_croe":["CROE.2.1.2","CROE.2.3.2","CROE.2.8.1"],"ffiec_is":["I.A","II.C.7(e)"],"hipaa_sr":["§164.308(a)(5)(i)","§164.308(a)(5)(ii)(A)"],"iosco_cyber":["PROT-4"],"sebi_cscrf":["CAPACITY","PR.AT"],"cmmc_2":["AT"],"nerc_cip":[],"nrc_73_54":[],"tsa_psd":[],"ieee_1686":[],"ferc_cip":[],"doe_c2m2":[],"api_1164":[],"awia":[],"iaea_nss":[],"pci_pts":[],"fips_140":[],"cbest":["CBEST.10"],"tiber_eu":[],"pci_hsm":[],"common_criteria":[],"isae_3402":[],"fca_sysc_13":["SYSC 13.5.1","SYSC 13.6.1"],"fda_21_cfr_11":[],"fda_cyber":[],"hitrust_csf":["02.b"],"iso_27799":["7.2"],"lloyds_ms":["MS8.13"],"naic_ds":["4-training"],"nhs_dspt":["NDG-2.2","NDG-3.1","NDG-6.4"],"pra_ss1_23":[],"solvency_ii":[],"owasp_masvs_v2":[],"csa_ccm_v4":[],"csa_aicm":[],"ccss_v9":[],"mica":[],"basel_sco60":[],"bssc":[],"sec_custody_digital":[],"dpdpa":[]},"attack_techniques":[],"metadata":{"last_reviewed":"2026-02-19","review_notes":"","mapping_status":"complete"},"function":"preventative","used_by_patterns":[]}}