---
title: "Training & awareness"
canonical: "https://auditbadger.com/nl/functies/training-en-bewustzijn/"
last-updated: "2026-09-05"
---

# Training & awareness

AI-generated security awareness training derived from *your* policies (not generic third-party courses), with role-based assignment, automated re-enrollment, and audit-ready completion evidence linked back to controls.

## What it does

| Capability | Detail |
|---|---|
| **AI course generation** | Upload a policy → get a full training course with structured lessons, callouts, examples, and quizzes |
| **Quiz formats** | Multiple choice, true / false, select-all-that-apply, with explanations |
| **Human review gate** | All AI content is reviewable and editable before publishing; bulk approve in two clicks |
| **Manual authoring** | AI is optional — you can write courses by hand if preferred |
| **Smart assignment** | Auto-enroll users assigned to a policy when its course is published |
| **Role-based assignment** | Assign by employment type (engineering, finance, all staff, etc.) |
| **Group enrollment** | Assign to teams or departments at once |
| **Email notifications** | Automated invitations and reminders with direct course links |
| **Completion evidence** | On pass: timestamped certificate generated and auto-linked to the controls the course satisfies |
| **Recertification** | Configurable renewal periods (30 / 90 / 180 / 365 days, or never) |
| **Auto re-enroll** | When a certification expires, the user is re-enrolled automatically |
| **Daily overdue detection** | Catches anyone who's slipped through |
| **PDF certificates** | Downloadable per-employee completion certificates |

## Workflow

1. **Upload policy** (acceptable use, incident response, data handling, etc.)
2. **AI generates course** — lessons, quizzes, key takeaways
3. **Review and publish** — edit if needed; bulk approve; assigned users are auto-enrolled
4. **Evidence created on completion** — certificate + control linkage; on expiry, automatic re-enrollment

## What auditors ask — what AuditBadger answers

| Auditor question | AuditBadger answer |
|---|---|
| "Show me your training program" | Courses derived from your actual policies, not generic content |
| "Prove employee X completed training" | Timestamped record with score, attempt count, and certificate |
| "How is training assigned by role?" | Role-based and group-based assignment with auto-enrollment |
| "How do you ensure ongoing training?" | Configurable renewal periods with auto re-enrollment |
| "Which controls does each course satisfy?" | Direct course-to-control mapping with linked evidence |
| "What's your completion rate?" | Real-time dashboard, per-course and per-user |

## Frameworks supported

| Framework | Where it satisfies |
|---|---|
| **SOC 2** | Map courses to Trust Services Criteria (especially CC1.4 — Commitment to competence) |
| **ISO 27001:2022** | A.6.3 — Information security awareness, education and training |
| **HIPAA** | Administrative Safeguard training requirements (§164.308) |
| **GDPR** | Documented staff awareness training for data protection |

## Useful links

- Sign up: [auth.auditbadger.com/signup](https://auth.auditbadger.com/signup)
- All features: [/features](/features)
- Compliance management: [/features/compliance-management](/features/compliance-management)
- SOC 2 deep dive: [/compliance/soc2](/compliance/soc2)
- ISO 27001 deep dive: [/compliance/iso27001](/compliance/iso27001)
