Chief Information Officer develop and implement policies and procedures to obtain feedback on the agency’s specialized security training, update the training program, and request that third-party providers update their training content, as appropriate, to keep current with security practices.