$1.$ The Security Awareness and Training Policy is implemented for which NIST functions and sub$-$categories? $[5$ points$]$

Answer:

$2.$ Which organization is the implementation example you identified for? Which industry sector $($e$.$g$.,$ education, government, etc.$)$ is the organization in$?[5$ points$]$

Answer:

$3.$ What is the purpose of the example policy? Which party $($parties$)$ does the policy apply to$?$ Who is$/$are responsible for implementing this policy? $[5$ points$]$

Answer:

$4.$ As compared to the NIST policy template, how is the example policy customized to fit the needs of the organization? Describe one occurrence of the customization in detail. $[5$ points$]$

Answer:

$5.$ If specified in the example policy, what criteria are defined to verify the organization$$s compliance to the policy? If not specified in the example policy, what are your recommendations? $[5$ points$]$

Answer:

$6.$ If specified in the example policy, how frequent is the policy reviewed for potential modifications? If not specified in the example policy, what are your recommendations? $[5$ points$]$