AR 25-2 requires all users to what?

As per Section 4-5, paragraph a.(8)(a):

All users must receive IA awareness training tailored to the system and information accessible before issuance of a passWord for network access. The training will include the following:

1. Threats, vulnerabilities, and risks associated with the system. This portion will include specific information regarding measures to reduce malicious logic threats, principles of shared risk, external and internal threat concerns, acceptable use, privacy issues, prohibitions on loading unauthorized software or hardware devices, and the requirement for frequent backups.
2. Information security objectives (that is, what needs to be protected).
3. Responsibilities and accountability associated with IA.
4. Information accessibility, handling, and storage considerations.
5. Physical and environmental considerations necessary to protect the system.
6. System data and access controls.
7. Emergency and disaster plans.
8. Authorized systems configuration and associated CM requirements.
9. Incident, intrusion, malicious logic, virus, abnormal program, or system response reporting requirements.
10. INFOCON requirements and definitions.
11. AUP requirements.