Do you use TRACS to submit or track your monthly vouchers? If so, you are familiar with the annual Cyber Awareness Challenge. Each year, you are required to complete the challenge by logging in and taking on the role of a Federal agent with access to highly sensitive information. The 2022 version is here and HUD wants all TRACS Coordinators and Users to complete the training by no later than January 31, 2022.
Perhaps you’ve heard of the Cyber Awareness Challenge, but you don’t work directly with the vouchers. Do you complete the challenge annually to maintain your EIV Coordinator or User access? Since TRACS and EIV require the same training, Coordinators and Users of each system are encouraged to utilize the same January 31st deadline.
The obligation to complete security awareness training has deep origins. Per OMB A-130, Federal Information Security Management Act (FISMA), and the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-16, all affordable housing stakeholders working with the Department of Housing and Urban Development (HUD) must receive Information Security awareness training, as well as role-based training each year. This means that prior to granting access to TRACS or EIV, users must complete the training, and then they must take it again every year to remain compliant.
To access the Cyber Awareness Challenge, go to https://public.cyber.mil/training/cyber-awareness-challenge. Click on the “Launch Training” icon and then click “Start New Session”.
Upon completion, you must print the certificate. Keep copies of all TRACS/EIV Coordinators’/Users’ certificates on hand, in the appropriate binder or safe-keeping spot. Certificates are subject to review and audit by authorized personnel, such as PBCAs or HUD staff performing Management and Occupancy Reviews.
Good luck with the challenge and always remember to keep your data safe!