initial training
163621·updated Oct 3, 2026A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.
Source
Provide security literacy training to system users: As part of initial training for new users and [ Assignment: organizationdefined frequency ] thereafter, When required by system changes or following [ Assignment: organizationdefined events ], and On recognizing and reporting indicators of insider threat, social engineering, and social mining.the sentence this term was read in
generalized from a web lookup of the quoted expression, with 1 reviewed place(s) it is used as the term Verdict: term of art.
- SECURITY AND PRIVACY AWARENESS - 5320.1
- Training
- Security and Privacy Training
- Addressing Security Awareness and Training
- holyoke community college did not ensure that required information security training
- other matters northern essex community college does not require its users to complete information security awareness training
- Security Training Policy 11.15.17
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
Classifications
Entity Type
Sensitivity
Information Class
Variants
- plural
- initial trainings
- possessive
- initial training's
- pluralpossessive
- initial trainings'
Framework definitions
- §1 · attested_usage_reviewer_confirmed
- No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.Increment 2: attested in NIST SP 800-171r3 without a glossary definition.
- §1 · web_lookup_draft
- A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.Drafted by the propose-term web lookup (PD-018); a curator confirms or replaces it.