---
tags:
  - 20x
  - Cloud Service Providers
  - Key Security Indicators
---

<span class="picto">:lucide-computer:{ .machine title="This content is machine-generated from FedRAMP Machine-Readable Rules." }</span>

# Cybersecurity Education






### Reviewing All Training

??? abstract "KSI-CED-RAT"
    **Changelog:**


    - **2026-06-24:** Official launch of the FedRAMP Consolidated Rules for 2026.




!!! quote ""
    The effectiveness of relevant cybersecurity education and training is persistently reviewed, including at least general training for all employees, role-specific training for employees in high risk roles, training for development and engineering staff on secure software delivery, and training for staff involved with incident response or disaster recovery.



    **Related SP 800-53 Controls:** [CP-03](../../../reference/controls/contingency-planning.md#cp-03){ data-preview }, [IR-02](../../../reference/controls/incident-response.md#ir-02){ data-preview }, [PS-06](../../../reference/controls/personnel-security.md#ps-06){ data-preview }, [AT-02](../../../reference/controls/awareness-and-training.md#at-02){ data-preview }, [AT-02 (02)](../../../reference/controls/awareness-and-training.md#at-02-02){ data-preview }, [AT-02 (03)](../../../reference/controls/awareness-and-training.md#at-02-03){ data-preview }, [AT-03 (05)](../../../reference/controls/awareness-and-training.md#at-03-05){ data-preview }, [AT-04](../../../reference/controls/awareness-and-training.md#at-04){ data-preview }, [IR-02 (03)](../../../reference/controls/incident-response.md#ir-02-03){ data-preview }, [AT-03](../../../reference/controls/awareness-and-training.md#at-03){ data-preview }, [SR-11 (01)](../../../reference/controls/supply-chain-risk-management.md#sr-11-01){ data-preview }

    ---
    **Terms:** [Incident](../../../definitions/#incident){ data-preview }, [Persistently](../../../definitions/#persistently){ data-preview }, [Vulnerability Response](../../../definitions/#vulnerability-response){ data-preview }
