Cybersecurity program

Security awareness training that renews every year

A required yearly security awareness program that renews with your current policies, names your own tools, and gives your auditor a record of who is current.

  • Required for everyone, with reminders until they finish
  • A fresh cycle every year with your current policies
  • Policies acknowledged, with a change history
  • Lessons that name your own tools, like "post in #security on Slack"
  • An export of who is current as of any date
  • A Security Awareness Training credential for each person
62%
of breaches involved a person, up from 60% the year before.
Verizon, Data Breach Investigations Report, 2026

Questions

What does the Cybersecurity program cover?

Fourteen short modules on the habits an auditor expects every employee to have: phishing emails, texts and QR codes, deepfake calls, passphrases and sign-in keys, updates, labelling files, personal data, working remotely, tailgating, approved AI tools, documents that try to give your AI assistant orders, insider risk, and who to tell when something goes wrong. Lessons name your own tools and channels.

How does it renew every year?

A fresh cycle opens every year. Everyone is seated, reminders go out until each person finishes, and the policies they acknowledge are the current versions, with a change history.

Does this make us SOC 2 compliant?

No training tool does that on its own. The program is built to support the SOC 2 security awareness criteria (CC1.4 and CC2.2) and gives your auditor an export of who is current as of any date.

Is it sold separately?

It comes with Train Space alongside the AI programs, so security and software training live in one place with one record.

Comparing tools? Read Train Space vs KnowBe4.