As noted, all users complete security awareness training [annually] and prior to receiving network access. Completion of required security awareness training is maintained at [location of evidence of completed security awareness training for users]. The [Management Role]