Security Training Overview
What Kit's Training module is, who authors it, and how a security-awareness program is built.
Why It Matters
SOC 2, ISO 27001, and most cyber-insurance carriers require evidence that every staff member completes security-awareness training annually and within a set window of joining. Stitching that together from slide decks, a quiz tool, and a spreadsheet of signatures is slow to build and painful to prove at audit time.
Kit’s Training module lets an account admin author a self-paced program directly inside Kit: ordered slides, a knowledge-check quiz, and a sign-off attestation, all in one place. A built-in template library covers the frameworks most companies are audited against — SOC 2, GDPR, ISO 27001, and HIPAA. Pick a framework, answer a handful of questions about your company, and you start from a complete, audit-ready draft instead of a blank page.
Who It’s For
Training authoring is an admin task. The Build from template action and program editor are visible only to account admins. Participants receive an invitation email, take the training in the portal, and their completion is recorded automatically — Kit even follows up with reminder emails for anyone who hasn’t finished. This guide covers everything an admin does to build, publish, and roll out a program.
What a Program Contains
A training program has three parts the author edits independently:
| Part | What it is |
|---|---|
| Slides | An ordered set of content slides. Each has a section label, title, why-it-matters, a list of rules, a rich-text company callout, and a what-to-do. |
| Knowledge check | A multiple-choice quiz with a configurable pass mark. Participants pass it before signing off. |
| Attestation | The legal sign-off text each participant must agree to before completion is recorded. |
Company-specific facts (your password manager, MFA policy, incident contact, payment processor, and so on) are written once as {{ variables }} and substituted into every slide and the attestation at render time. One template fits any company.
How It Works
- Build — From the Training dashboard, click Build from template to open the template library, then pick one of the four framework decks. Kit creates a program named after your company and seeds the full deck.
-
Answer the questions — The smart template asks a short list of company questions (company name, password manager, MFA policy, incident contact, and more). Your answers fill in the
{{ variables }}. - Refine — Review and edit slides, tune the knowledge check, and adjust the attestation text.
- Publish — Once the program has at least one slide, a configured quiz, and attestation text, publish it.
- Invite & follow up — Invite participants. Kit emails each person and automatically sends reminders to anyone who hasn’t completed — a nudge after the invitation and a last call before the deadline.
Program Statuses
| Status | Meaning | When to Use |
|---|---|---|
| Draft | Still being authored. Not published. | The default for a new or seeded program. |
| Published | Live. | When the program is ready for participants. |
| Archived | Paused / retired. | When you pause a published program (the Pause action archives it). |
Note
A program cannot be published until it has at least one slide, a configured knowledge check, and attestation text. The editor shows exactly which of these is missing.
Next Steps
- Training Template Library — browse the SOC 2, GDPR, ISO 27001, and HIPAA decks and seed one.
- Build from the Smart Template — answer the company questions that fill in your seeded deck.
- Edit Slides — add, edit, reorder, and delete slides.
- Knowledge Check & Attestation — tune the quiz and sign-off, then publish.
- Reminders & Deadlines — how Kit follows up with participants who haven’t finished.