Information Technology Security Training Requirements: A Role- and Performance-Based Model

摘要

This document has been designed as a 'living handbook' to have the longest usefullife possible as the foundation of and structure for 'do-able' training by federal agencies. To avoid unnecessary outdating, the document uses terminology that is not consistent across Federal agencies and broadest in scope in encompass all information processing storage, and transmission resources and technologies--example, 'Information Technology.' A glossary in key terms is provided in an appendix. An extensible set of knowledges, skills, and abilities (KSAs) structure the Training Requirements and are linked to the document through generic IT Security Body of Knowledge, Topics and Concepts categories. Finally, the emphasis of the Training Requirements is on training criteria or standards, rather than on specific curricula or content. The training criteria are established according to trainees' role(s) within their organizations, and are measured by their on-the-job performance.