What if my company has a §172.800 security plan?

You also need In-Depth Security training under §172.704(a)(5) — available as an add-on. The Core Bundle satisfies §172.704(a)(4) security awareness for nearly all employees, but (a)(5) is a separate, additional requirement.