Personnel should complete an AI awareness training annually in order to satisfy specific requirements set by AI-related frameworks, such as NIST AI RMF and ISO 42001. You have the option to configure this training within Drata, a key step in addressing the associated controls.

Only Admins and Information Security Leads have access to this section within Drata.

Drata provides multiple ways to manage AI awareness training within the application. When a related framework is enabled for your account you’ll have a setting for Annual AI Awareness Training (AI awareness training section) on the Internal Security page. From here you can select one of four options:

Once you've selected an option using the radio button, save your changes.

Drata has developed our own embedded AI awareness training. This enables personnel to complete the training directly in My Drata during onboarding and easily fulfill their annual requirement, thereafter.

When an employee or contractor completes their AI awareness training, Drata will generate a certificate of completion. This PDF is automatically uploaded to Drata and can be viewed/downloaded from the personnel drawer and by personnel in My Drata.

If your organization uses another tool or conducts internal training, select the second radio button. You can optionally add a URL for the external AI awareness training which will link personnel to the training directly from the My Drata onboarding.

Once training is complete, personnel will need to return to ‘My Drata > Complete AI awareness training’ and upload proof of completion—such as a screenshot or other file. Once uploaded, the file can be viewed/downloaded from the personnel drawer and by personnel in My Drata.

If you wish to keep AI awareness training completely independent from Drata, you can select the third option which will exclude the ‘Complete AI awareness training’ step from personnel onboarding.

With this option, you'll need to manually upload a file directly in each personnel drawer by selecting the AI awareness training ‘View / Upload Evidence’ button.

If AI awareness training is not required for your personnel or organization, select the fourth option to opt out of training. When selected, there will be no references to AI awareness training in Drata.

Compliance is determined by the presence of evidence of AI awareness training—such as a certificate of completion, screenshot, or other file—for each current employee or contractor within your organization.

Navigate to the ‘Personnel’ page to see the status of AI awareness training compliance for all personnel under the AI Awareness Training column, or select a specific person to view their personnel details and view or upload evidence.