Skip to main content

Security Awareness Training

The Training module lets you build and deliver security awareness training to your organization. Create modules from the platform library, build custom content, or generate modules with AI. Organize modules into campaigns alongside policy acknowledgments and secure coding challenges, then track completion with magic-link delivery, automated reminders, and an analytics dashboard.

Overview

Access from Security Operations → Training in the sidebar. The module has four pages:

  • Training Library — Browse, enable, and manage training modules
  • Campaigns — Create, launch, and track training campaigns
  • Email Templates — Customize emails for each step of the training lifecycle
  • Dashboard — Organization-wide training metrics and compliance overview

Training Library

Training Library page showing header with Generate with AI and New Module buttons, search bar with All Categories and All Statuses filters, three tabs (My Modules 2, Platform Library 29, Coding Challenges 11), and My Modules table with columns for Title, Category, Source, Difficulty, Duration, and Status showing two HIPAA modules

The Training Library is the central hub for managing training content. It has three tabs:

My Modules

Your organization's enabled training modules in a sortable table:

ColumnDescription
TitleModule name (click row to open the module editor)
CategoryTopic area badge
SourceWhere the module came from — Platform, Custom, or AI Generated
DifficultyBeginner, Intermediate, or Advanced
DurationEstimated completion time in minutes
StatusDraft, Active, or Archived

Use the search bar and dropdown filters to find modules by title, category, or status. Action buttons let you toggle a module between Draft and Active or archive it.

Platform Library

Platform Library tab showing a card grid of available modules including Business Continuity Awareness (Topical, 14 min, 7 slides), Change Management for Employees (Topical, 12 min), Cloud Security Basics (Topical, 15 min), Data Classification and Handling (Data Handling, 20 min, 9 slides), HIPAA Awareness Essentials (Regulatory, 12 min, 10 slides), HIPAA for IT and Security Teams (Regulatory, 30 min, 13 slides), and more, each with an Enable Module button

A curated library of pre-built modules maintained at the platform level. Each card shows the module title, description, category badge, duration, slide count, and an Enable Module button that copies the module into your organization's library.

Coding Challenges

Secure coding challenges that test employees' ability to identify and fix vulnerabilities. Each card shows the title, difficulty badge, OWASP category, programming language (JavaScript, Python, SQL), time limit, and description. Challenges are evaluated in an isolated sandbox environment.

Creating Modules

Click + New Module to create a custom module from scratch, or Generate with AI to have AI create a module based on a topic description. Custom modules use a slide-based editor where you build content slide by slide.

Module Fields

FieldDescription
TitleModule name
DescriptionWhat the module covers
CategoryTopic area (see categories below)
DifficultyBeginner, Intermediate, or Advanced
DurationEstimated completion time in minutes
Passing ScoreMinimum percentage to pass (default 80%)
StatusDraft, Active, or Archived
TagsSearchable keywords

Categories

CategoryDescription
General AwarenessBroad security awareness topics
PhishingEmail phishing recognition and response
Password HygienePassword management and best practices
Data HandlingData classification, handling, and protection
Incident ReportingHow to recognize and report security incidents
Remote WorkSecure remote work practices
Physical SecurityPhysical access and environmental security
Insider ThreatRecognizing and responding to insider threats
RegulatoryCompliance-specific training (HIPAA, PCI DSS, etc.)
Role-BasedTraining tailored to specific job functions

Slide Types

Each module contains slides of different types:

TypeDescription
ContentInformational slides with text, images, and realistic artifacts (simulated emails, Slack messages, alerts)
QuizKnowledge check questions with scoring
ScenarioInteractive decision-making exercises
VideoEmbedded video content with optional presenter video
Code ChallengeSecure coding exercises evaluated in a sandboxed Lambda environment
SummaryRecap and key takeaways

Campaigns

Training Campaigns page showing header with New Campaign button, search bar with All Statuses filter, and campaign table with columns for Campaign, Module, Status, Recipients, Completion, Due Date, and Actions, showing two campaigns: IT Security Advanced Q2 2026 (Draft, 0 recipients, 0%) and HIPAA Awareness Q2 2026 (Active, 5 recipients, 0%)

Campaigns assign training content to employees and track completion. The campaign table shows all campaigns with their name, linked module, status badge, recipient count, completion progress bar, due date, and action buttons.

Creating a Campaign

Click + New Campaign to open the three-step creation wizard.

Step 1: Select Content

Choose what content to include in the campaign across three sub-tabs:

  • Training — Select training modules from your library (with search and category/status filters)
  • Policies — Select policies for acknowledgment signing
  • Challenges — Select secure coding challenges

Selected items appear as cards below the selection list. Campaigns can include a mix of all three content types.

Step 2: Campaign Details

  • Campaign Name — Descriptive title (required)
  • Due Date — Target completion deadline
  • Auto-Enroll — Automatically add new employees to the campaign
    • Auto-Enroll Scope — Description of which employees get enrolled (e.g., "All new hires", "Engineering department")
    • Auto-Enroll Due Days — Days after enrollment before the assignment is due
  • Reminder Rules — Configure automated reminder notifications

Step 3: Review & Create

Summary of selected content and campaign settings. Click Create to save as a draft campaign.

Campaign Lifecycle

DRAFT → SCHEDULED → ACTIVE → COMPLETED → ARCHIVED
StatusDescription
DraftCampaign configured but not yet launched
ScheduledSet to launch at a future date/time
ActiveInvitations sent, tracking completions
CompletedCampaign ended
ArchivedArchived for historical reference

Campaign Detail Page

Campaign detail page for HIPAA Awareness Q2 2026 showing Active status badge, Content and Due/Launched dates, Remind and Archive buttons, six stat cards (Total Recipients 5, Completed 0 at 0%, In Progress 0, Pending 5, Avg Score dash, Avg Time dash), Overall Completion progress bar at 0%, Reminder Rules section with Add Rule button, Include in manager digests toggle, and assignments table with columns for Name, Email, Status, Started, Completed, Score, Pass/Fail, and Time showing five recipients all in Pending status

Click any campaign to view detailed results.

Header: Campaign name, status badge, content module, due date, launched date, and action buttons (Remind, Archive).

Stat Cards:

MetricDescription
Total RecipientsNumber of assigned trainees
CompletedCount and percentage who finished
In ProgressCurrently working on the training
PendingInvitation sent but not yet started
Avg ScoreAverage assessment score across completions
Avg TimeAverage time spent on the training

Overall Completion: A progress bar showing the percentage of recipients who have completed.

Reminder Rules: Configure rules to automatically remind trainees who haven't completed. Click + Add Rule to create a rule:

Rule TypeDescription
After EnrollmentSend reminder N days after the assignment was created
Before Due DateSend reminder N days before the due date
Recurring IntervalSend reminder every N days until completion

Manager Digests: Toggle to include this campaign's assignments in per-manager training digest emails.

Assignments Table:

ColumnDescription
NameTrainee name
EmailTrainee email address
StatusPending, In Progress, Completed, Expired, or Waived
StartedWhen the trainee opened the training
CompletedWhen they finished
ScoreAssessment score (if applicable)
Pass/FailWhether they met the passing threshold
TimeTotal time spent

Use the search bar and status filter to find specific assignments. The actions menu on each row lets you send a reminder, waive the assignment, or re-assign.

Bulk Actions:

  • Add recipient — Add a single trainee by email
  • Bulk CSV upload — Import a list of email addresses
  • Roster picker — Select from your Personnel directory
  • Download results CSV — Export assignment data

Adding Recipients

Recipients can be added via:

  • Manual entry — Email address and name
  • CSV upload — Bulk import from a spreadsheet
  • Personnel roster — Select from your AccessPersonnel directory
  • Key contacts — Select from organizational key contacts

Assignment Lifecycle

StatusDescription
PendingMagic link sent, trainee hasn't started
In ProgressTrainee has opened and begun the training
CompletedTrainee finished all content (passed or failed)
ExpiredMagic link token has expired
WaivedTrainee waived from the requirement

Trainees access their training via a magic link in the enrollment email. The link opens a public training portal where they progress through slides, answer quizzes, complete scenarios, and submit coding challenges. Progress is saved automatically.

Email Templates

Email Templates page showing header description, six tabs (Enrollment, Reminder, Overdue, Completion, Admin Digest, Manager Digest), Enrollment tab active with description text, Default enrollment email card with Built-in badge, Preview and Customize buttons, and read-only fields showing Subject (Security Awareness Training: trainingTitle — orgName), Heading, Body with orgName variable, and CTA Label (Start Training)

Customize the emails trainees receive at each step of the training lifecycle. The page has six tabs, one for each communication type.

Communication Types

TypeDescription
EnrollmentSent when a trainee is first assigned to a training
ReminderSent on your reminder schedule for assignments still in progress
OverdueSent automatically when an assignment passes its due date
CompletionSent when a trainee finishes all modules
Admin DigestScheduled summary of training compliance sent to admins
Manager DigestScoped training status sent to each manager for their direct reports

Template Fields

Each template includes:

  • Subject — Email subject line (supports template variables)
  • Heading — Bold title in the email body
  • Body — Main message text (supports **bold** formatting and template variables)
  • CTA Label — Call-to-action button text (e.g., "Start Training")
  • Footnote — Optional footer text
  • Preheader — Optional preview text shown in email clients

Template Variables

Insert dynamic placeholders using the Insert variable menu:

VariableDescription
{{trainingTitle}}Name of the training module
{{orgName}}Organization name
{{recipientName}}Trainee's name
{{dueDate}}Assignment due date
{{campaignName}}Campaign name
{{trainingUrl}}Magic link to start the training

Built-in vs. Custom Templates

  • Built-in templates are platform defaults shown as read-only with Preview and Customize buttons. Click Customize to create an editable copy for your organization.
  • Custom templates autosave on blur and include a Reset to default button to revert to the platform template.

Admin Digest Configuration

The Admin Digest tab includes a schedule configuration section:

  • Enabled — Toggle digest emails on/off
  • Cadence — Weekly or Monthly
  • Day — Day of week (weekly) or day of month (monthly)
  • Send Hour (UTC) — Hour to send
  • Upcoming Due Window — How many days ahead to include upcoming assignments
  • Recipient Mode — Explicit list of email addresses or permission-based
  • Send Now — Trigger an immediate digest

Manager Digest Configuration

  • Campaign Scope — Include all active campaigns or only those with the manager digest toggle enabled
  • Missing Manager Fallback — What to do when an employee has no manager: escalate up the chain, include in admin digest only, or one-hop escalation

Dashboard

Training Dashboard showing six KPI cards (Active Campaigns 1 Healthy, Total Assignments 5 Healthy, Completed 0 Healthy at 0% complete, Completion Rate 0% High, Avg Score 0% High, Overdue 0 Healthy), Modules by Source section showing 2 Platform modules, and Campaign Progress table with columns for Campaign, Content, Progress bar, Completion %, Overdue count, and Due Date showing HIPAA Awareness Q2 2026 at 0/5 progress

The dashboard provides an organization-wide view of training metrics and compliance.

KPI Cards

MetricHealthy ThresholdDescription
Active CampaignsCount of currently active campaigns
Total AssignmentsTotal assignment count across all campaigns
CompletedCount and percentage of completed assignments
Completion Rate %70% or higherPercentage of assignments completed (High if under 40%, Medium if under 70%)
Avg Score %70% or higherAverage score across completed assignments (High if under 40%, Medium if under 70%)
Overdue0Incomplete assignments past their due date (Critical if over 10, High if over 5, Medium if 1–5)

Each card is color-coded by health status: green (Healthy), amber (Medium), orange (High), or red (Critical).

Modules by Source

A breakdown showing how many modules you have from each source: Platform, Custom, and AI Generated.

Campaign Progress

A table showing active and recently completed campaigns:

ColumnDescription
CampaignCampaign name (click to navigate to detail page)
ContentModule and policy titles included in the campaign
ProgressVisual progress bar with completed/total count
CompletionCompletion rate percentage
OverdueCount of overdue assignments (red badge if non-zero)
Due DateCampaign deadline

Auto-Enrollment

When enabled during campaign creation, auto-enrollment automatically adds new employees to active campaigns:

  • Scope — Define which employees get enrolled (free-text description, e.g., "All new hires", "Engineering department")
  • Due Days — Number of days after enrollment before the assignment is due

The training scheduler checks for new employees every 5 minutes and creates assignments automatically.

Integration with Phishing Simulation

When phishing simulation Auto-Remediate Clickers is enabled, employees who click simulated phishing links are automatically enrolled in a selected training campaign. This creates a closed-loop workflow:

  1. Test — Send simulated phishing campaign
  2. Identify — Track who clicks
  3. Train — Auto-enroll clickers in remediation training
  4. Retest — Include in future campaigns to measure improvement

Public Training Portal

Trainees access their assigned training through a public portal via magic link (no platform login required). The portal presents:

  • Slide-by-slide progression through module content
  • Interactive quizzes with immediate feedback
  • Scenario-based decision exercises
  • Secure coding challenges with sandboxed execution
  • Automatic progress saving
  • Score calculation and pass/fail determination on completion