DOE-OIG-23-25 - Recommendation 17

We recommend that the Chief Information Security Officer, BPA, direct personnel to: 17.Develop and implement a role-based security training program for personnel in roles with privileged system access or other security-related responsibilities, to include ensuring training is completed prior to granting system access or initiating activities related to other responsibilities.