# AT-4 — Training Records

- **Control ID:** AT-4
- **Family:** [AT](/md/families/AT.md)
- **Baselines:** low, moderate, high
- **Enhancement of:** No content available.

## Description

Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-based security and privacy training; and Retain individual training records for \[assignment\].

## Discussion

Documentation for specialized training may be maintained by individual supervisors at the discretion of the organization. The National Archives and Records Administration provides guidance on records retention for federal agencies.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [AT-2](/md/controls/AT-2.md)
- [AT-3](/md/controls/AT-3.md)
- [CP-3](/md/controls/CP-3.md)
- [IR-2](/md/controls/IR-2.md)
- [PM-14](/md/controls/PM-14.md)
- [SI-12](/md/controls/SI-12.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.