The Office of Personnel Management today outlined a four-step process for agencies to follow to ensure employees, contractors and others who access federal systems are adequately trained in IT security. The final rule, effective today, requires agencies to develop an IT security training plan. The plan should identify employees with significant cybersecurity responsibilities and provide role-specific training as detailed by the National Institute of Standards and Technology guidance. Full Story