Security awareness training
Assign framework-mapped courses, track completion, and collect certificates as audit evidence.
| Person | Course | Assigned | Due | Status |
|---|---|---|---|---|
| A. Rivera | Security awareness | This quarter | On track | Complete |
| S. Chen | Phishing awareness | This quarter | On track | Complete |
| J. Okafor | Secure coding | This quarter | This week | In progress |
| New hire | Onboarding security | This month | Overdue | Overdue |
“Do your people get security training?” is a checkbox on every questionnaire and a control in every framework. Keel makes it real: a built-in library of framework-mapped courses you can preview, assign to your whole team or specific people, track to completion, and keep the certificates as evidence.
Training is a control you can’t prove
Maybe you sent a deck once. But without assignments, completion tracking, and certificates, you can’t show an auditor that your team was actually trained, so the control fails on paper even if it happened.
What security awareness training does
A built-in course library
Ship day one with framework-mapped courses covering security-awareness fundamentals, phishing, data handling, HIPAA, acceptable use, secure remote work, incident response, and privacy, each with a lesson, quiz, and completion certificate. Browse and preview any course before you assign it.
Your people, your way
Add employees by hand, sync a directory (Microsoft Entra or Google Workspace), or import a CSV, then assign a course to everyone or to specific individuals, and let staff self-enroll from the catalog.
Completion tracking
See who has and hasn’t completed each assignment at a glance, the record an auditor asks for.
Certificates as evidence
Completed training produces certificates captured as audit evidence, tying the training control to proof, with a per-person history and a CSV export for your auditor.
Reminders and recurrence
Nudge people who haven’t finished, and roll training over on a recurring cadence so the control stays satisfied year over year.
Clean offboarding
When someone leaves, mark them a leaver. Their access and training record is preserved as evidence rather than deleted, so your history stays defensible.
Why it matters
- Prove the training control instead of just asserting it
- Assign to the whole team or just the people who need it
- Chase completions automatically instead of by hand
- Keep certificates and a per-person history as exportable evidence
- Answer “do you train your staff?” with a yes and the record
Get audit-ready, and prove it
Security awareness training is one module of a full GRC platform: controls crosswalked across every framework, so you collect evidence once and comply everywhere. Start free, no credit card, no sales call.
Start freeFrequently asked questions
Do completions count as evidence?
Yes. Completed training generates certificates captured as audit evidence against the training control, with a per-person history you can export to CSV.
Do I need to sync a directory first?
No. You can add employees by hand or import a CSV, and you can preview every course before anyone is added. Directory sync (Entra or Google Workspace) is there when you want it, not a prerequisite.
Can I assign a course to just one person?
Yes. Assign to your whole team or to specific individuals, and staff can self-enroll in courses from the catalog.
Can training repeat annually?
Yes. Assignments can roll over on a recurring cadence, and Keel reminds people who haven’t completed theirs.
Which plans include training?
Security-awareness training is included on every paid plan.
Related features: Access reviews · Evidence management · Controls & crosswalk
Works with: SOC 2 · ISO/IEC 27001 · HIPAA