initial training
A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.
Framework senses
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in NIST SP 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.Drafted by the propose-term web lookup (PD-018); a curator confirms or replaces it.