Role-based Training. All Contractor (and/or any subcontractor) employees with significant security responsibilities (as determined by the program manager) must complete role-based training annually commensurate with their role and responsibilities in accordance with HHS policy and the HHS Role-Based Training (XXX) of Personnel with Significant Security Responsibilities Memorandum. Read further guidance about the NIH Role-based Training xxxxx://xxxx.xxx.xxx/aboutus/publicinfosecurity/securitytraining/Pages/xxxxxxxxxxxxxxxxx.xx px.
Role-based Training. Agencies must provide role-based security training to personnel with assigned security roles and responsibilities before authorizing access to information systems or performing assigned duties that require access to Confidential Data. Such Role-Based Training must be completed on an annual basis thereafter and when required by information system changes. Personnel with security roles and responsibilities include, but are not limited to, the following positions: Information System Security Manager, Information System Security Officer, Security Specialist, Network Administrator, Systems Administrator, Database Administrator, Programmer/Systems Analyst, System Owner, Systems Designer/Systems Developer, helpdesk.
