ASSOCIATED DRATA CONTROL

This test is part of the Security Training control that ensures your company has established training programs for privacy and information security to help employees understand their obligations and responsibilities. This control identifies compliance to the company security policies and procedures, including the identification and reporting of incidents. All full-time employees are required to complete these trainings annually.

WHAT TO DO IF A TEST FAILS

If Drata finds missing security awareness training certificates for any personnel the test will fail. With a failed test you will receive a list of personnel that has not yet completed their security training.

To remediate a failed test, you will need to advise these employees to complete the required security training and ensure that their certificate of completion is found within Drata.