3.2 Awareness & Training1 ptPOA&M-eligible

3.2.3 — Train on insider-threat indicators

Provide security awareness training on recognizing and reporting potential indicators of insider threat.

People learn to recognize and report insider-threat signs.

What it actually means

Add insider-threat recognition to your awareness training — what the warning signs look like and how to report them. Often a module within your general awareness program.

Pass or fail — an assessor needs a "yes" to each

What to have ready

Where teams trip up

See where this control puts your score

Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.

Calculate your SPRS score →Draft your SSP language →

Connected requirements

More in Awareness & Training (3.2)

← Back to the Control Library

The GovCon Compliance Brief
Get the next regulation change explained in plain English.

One CMMC / NIST 800-171 update, decoded, every other week. No spin, no sales pitch. Free.