HERE'S WHY
Connecting your Curricula account will automate the evidence collection process when your personnel complete assigned security awareness trainings.
BEFORE DIVING IN
If you are new to Curricula, you need to create your account and complete the setup for personnel and assignments.
Verify there is an assignment in your account with one of the following statuses, before connecting to Drata: In-Progress, Completed, or Draft. Data from deleted assignments cannot be imported to Drata
Ensure that all personnel are enrolled in the correct Curricula assignments
How Drata Determines Training Compliance
For each individual, Drata uses a combination of campaign selection, enrollment, and completion status to determine their respective training compliance.
Selection:
Drata will only consider campaigns that are selected within the connection settings.
Example:
☑Campaign A
☑Campaign B
☐Campaign C
Enrollment and Completion:
Drata takes the selected campaigns and checks who is enrolled. Each individual is required to complete all of their selected and enrolled campaigns.
If an individual is only enrolled in one selected campaign, this campaign will determine their complete compliance (superhero below). If they are enrolled in more than one campaign, then they will have to complete all of the campaigns to be considered compliant (astronaut and wizard below).
Example:
| Campaign A | Campaign B | Campaign C |
Enrollment | 👩🚀🧙♀️🦸♀️ | 👩🚀🧙♀️🥷 | 👩🚀🧙♀️🦸♀️🥷 |
Completion | 🟢🛑🟢 | 🟢🟢🛑 | 🟢🛑🟢🛑 |
Drata Compliance:
Taking these items together, we have 4 representative individuals.
👩🚀 This individual is enrolled in both selected campaigns and has completed both. They will be marked as compliant in Drata
🧙♀️ This individual is enrolled in both selected campaigns, but has only completed one. They will not be marked as compliant in Drata
🦸♀️ This individual is only enrolled in one selected campaign and has completed it. They will be marked as compliant in Drata
🥷 This individual is only enrolled in one selected campaign, but has not completed it. They will not be marked as compliant in Drata
Note: While all 4 individuals are enrolled in Campaign C, it is not selected and is therefore ignored.
Character | Campaign A | Campaign B | Campaign C | Overall Status |
👩🚀 | Enrolled: 🟢 | Enrolled: 🟢 | Not Selected | 🟢 2 |
🧙♀️ | Enrolled: 🛑 | Enrolled: 🟢 | Not Selected | 🛑 1/2 |
🦸♀️ | Enrolled: 🟢 | Not Enrolled | Not Selected | 🟢 |
🥷 | Not Enrolled | Enrolled: 🛑 | Not Selected | 🛑 |
Persistence:
Drata only syncs security awareness training for individuals that are not yet compliant.
Once an individual is marked compliant for security awareness training, Drata will stop syncing their status from Curricula. This ensures that changes in Curricula do not errantly overwrite that individual’s compliant status in Drata.
To reset one or more individual’s security awareness see this article.
HERE'S HOW
Connecting Curricula to Drata
Click on your company's logo in the bottom left navigation and select 'Connections’
At the top middle of your screen select ‘Browse Library’ then search for ‘Curricula'’
Click on ‘Connect’
NOTE: If you don't have a Curricula account with an active assignment set up, please click on 'Join Now' to set up your Curricula account.
After clicking on the “Connect your Curricula Account” button, you will be prompted to log in to Curricula and then accept the request from Drata to access your data.
Once Drata has established a connection with Curricula, you will need to select all assignment you wish to apply to security awareness training
For more detail on assignment logic see: “How Drata Determines Training Compliance”
Verify Settings
After connecting your Curricula account to Drata, we will automatically set Curricula as your training provider in the Internal Security section. You may verify your setting by clicking on your company's logo in the bottom left, then selecting 'Internal Security.'
Employee Onboarding
Once connected, your personnel will see a Curricula branded screen during their onboarding asking them to complete their training in Curricula.
We will update the personnel’s activity nightly and retrieve completion certificates for anyone that has completed the assigned security training.