Training
Security awareness training
Assign framework-mapped courses, track completion, and collect certificates as audit evidence. Training is on every plan: the core courses on Free, the full course library from Starter up.
| Person | Course | Assigned | Due | Status |
|---|---|---|---|---|
| A. Rivera | Security awareness | This quarter | On track | Complete |
| S. Chen | Phishing awareness | This quarter | On track | Complete |
| J. Okafor | Secure coding | This quarter | This week | In progress |
| New hire | Onboarding security | This month | Overdue | Overdue |
“Do your people get security training?” is a checkbox on every questionnaire and a control in every framework. Keel makes it real: a built-in library of framework-mapped courses you can preview, assign to your whole team or specific people, track to completion, and keep the certificates as evidence.
The problem
Training is a control you can’t prove
Maybe you sent a deck once. But without assignments, completion tracking, and certificates, you can’t show an auditor that your team was actually trained, so the control fails on paper even if it happened.
Capabilities
What Security awareness training does
A built-in course library
Framework-mapped courses, from everyday staff awareness to secure coding for developers: Security Awareness Fundamentals, Phishing & Social Engineering, Data Handling & Privacy, HIPAA Basics, Acceptable Use & Insider Risk, Secure Remote Work & BYOD, Incident Response Basics, Privacy & GDPR for Staff, OWASP Top 10:2025 for Developers, and OWASP Top 10:2025 Essentials. Each has short lessons, a quiz, and a completion certificate. Preview any course in your plan before you assign it.
Your people, your way
Add employees by hand, sync a directory (Microsoft Entra or Google Workspace), or import a CSV, then assign a course to everyone or to specific individuals, and let staff self-enroll from the catalog.
Completion tracking
See who has and hasn’t completed each assignment at a glance, the record an auditor asks for.
Certificates as evidence
Completed training produces certificates captured as audit evidence, tying the training control to proof, with a per-person history and a CSV export for your auditor.
Reminders and recurrence
Nudge people who haven’t finished, and roll training over on a recurring cadence so the control stays satisfied year over year.
Clean offboarding
When someone leaves, mark them a leaver. Their access and training record is preserved as evidence rather than deleted, so your history stays defensible.
Outcomes
Why it matters
- Prove the training control instead of just asserting it
- Assign to the whole team or just the people who need it
- Chase outstanding completions with one click instead of one email at a time
- Keep certificates and a per-person history as exportable evidence
- Answer “do you train your staff?” with a yes and the record
Get audit-ready, and prove it
Security awareness training is one module of a full GRC platform: controls crosswalked across every framework, so you collect evidence once and comply everywhere. Start free, no credit card, no sales call.
Frequently asked questions
Do completions count as evidence?
Yes. Completed training generates certificates captured as audit evidence against the training control, with a per-person history you can export to CSV.
Do I need to sync a directory first?
No. You can add employees by hand or import a CSV, and you can preview every course before anyone is added. Directory sync (Entra or Google Workspace) is there when you want it, not a prerequisite.
Can I assign a course to just one person?
Yes. Assign to your whole team or to specific individuals, and staff can self-enroll in courses from the catalog.
Can training repeat annually?
Yes. On the training page, Send due reminders rolls last year’s completed assignments over for the new year and nudges everyone who is due or overdue. You choose when to run it; Keel does not send it on a schedule.
Which plans include training?
Every plan, including Free. Free covers the core courses, and Starter and up cover the full course library.
Related features: Access reviews · Evidence management · Controls & crosswalk
Works with: SOC 2 · ISO/IEC 27001 · HIPAA
In the docs: Training