1. Are significant security responsibilities defined with qualifications criteria and documented in policy (AT-1 and PS-2)? Yes/No
2. Are records kept regarding which employees have significant security responsibilities (AT-3)? Yes/No.
3. How many employees in your department have significant security responsibilities (AT-3)?
4. Are training records maintained (AT-4)? (Training records indicate the training that specific employees have received.) Yes/No
5. How many of those with significant security responsibilities
training (AT-4)?
6. lf all personnel have not received training, state, all reasons that apply (AT-4):
a. insufficient funding.
b. insufficient time.