Which operational control focuses on requiring contractors, interns, and designated third parties to receive security training appropriate to their positions throughout their tenure? job rotation training, time-of-day restrctions, user training, mandatory vacations