PR.AT-02 targets individuals in specialized roles—like cybersecurity staff, finance personnel, or senior leaders—with tailored training to address role-specific risks. This advanced education ensures they can manage complex tasks, such as handling critical data or responding to incidents, with security in mind. It extends beyond general awareness to meet unique job demands.

This subcategory enhances expertise by assessing specialized knowledge regularly and requiring annual refreshers to introduce evolving practices. It includes third parties in these roles, ensuring consistent competency across the ecosystem. PR.AT-02 strengthens the organization’s ability to manage high-stakes cybersecurity challenges.