Training and Quizzes
Create security, privacy, AI, HIPAA, and secure coding training from Concord templates or upload your own, add a quiz people must pass, and turn completions into control evidence.
Overview
Most frameworks expect your staff to complete security training when they join and every year after. Concord lets you write that training, quiz people on it, and track who completed it, without a separate training platform. Completions feed your training controls automatically.
Training is part of People, included in Concord Trust Premium and Enterprise.
Creating Training
Go to Documents → Training and choose Add Training. You can:
- Create with Training Builder: pick a template and answer a few questions. Concord writes the training and a quiz to go with it, both of which you can edit.
- Upload Existing Training: upload slides or a document you already have, then add a quiz if you like.
The Training Builder includes these templates:
| Template | Covers |
|---|---|
| Security Awareness Training | Phishing, accounts, devices, data handling, and reporting |
| Privacy Awareness Training | Handling personal data under GDPR and US state privacy laws, requests, and breaches |
| AI Awareness Training | Approved AI tools, protecting data, checking output, and human oversight |
| HIPAA Privacy and Security Training | What PHI is, the minimum necessary rule, safeguards, vendors, and reporting breaches |
| Secure Coding Training | Untrusted input, access checks, secrets, dependencies, protecting data, and code review |
By default you see the templates for your frameworks. Choose Show all templates, including other frameworks to see the rest.
Like a policy, training is a draft until you publish it. Only published training can be required of your staff.
Adding a Quiz
Open the training and go to its Quiz tab. A quiz is optional: without one, people read the training and confirm they completed it.
- Add up to 20 questions. Each is Single Choice, Dropdown, or Multiple Choice (select all that apply), so Concord can mark it automatically.
- For each question, tick the Right Answers. Single Choice and Dropdown questions have one; Multiple Choice can have several.
- Set the Pass Mark (%). It starts at 80%.
Quiz changes reach your staff when you publish the training, together with any content changes.
Requiring Training
On Data Hub → People → Training, choose Add Training, pick the published training, and choose the groups who must complete it. Training gets the same due dates and reminders as policies. To count training done on another platform, see Requiring Training.
A completion counts for one year, so people owe the training again each year. To ask everyone again sooner, for example after a big update, see Asking Everyone Again.
Taking Training
People find their training on Your Training, under My Work. They open it, go through the content, answer the quiz, and tick the box to confirm.
If they don't reach the pass mark, Concord marks the answers to change and they can try again straight away. Nothing is recorded until they pass. When they pass, the completion is recorded with their score, the exact version they completed, and when.
Staff without a Concord account take training the same way, as guests.
Training as Control Evidence
When you run Controls, completions become evidence for the matching automated check:
- Security Awareness Training (CR-HRS-03): training from the Security Awareness, Privacy Awareness, HIPAA, and Secure Coding templates.
- AI Training (CR-AI-01): training from the AI Awareness template.
Training from a template counts automatically. For training you uploaded, choose the check in Counts Toward when you require it.
People and Policy Acknowledgements
Keep a list of your personnel, require the policies and training they must complete, record background checks and offboarding, and export the evidence auditors ask for.
Risk Register
Record the risks your organization faces, score them before and after treatment, link them to the controls that reduce them, and review them on a schedule.