What is security awareness training?
Security awareness training teaches employees to recognize and avoid threats such as phishing, social engineering, and unsafe data handling. It is usually required at hire and repeated at least once a year. Most compliance frameworks, including SOC 2 and ISO 27001, expect it.
What the buyer is really asking
Give the cadence (at hire and at least annually is the norm), the topics covered, and the completion rate. Name the platform or say if the training is built in-house.
Other ways buyers ask it
Every one of these wants the same answer:
- “How often do you conduct security awareness training?”
- “What topics does your security training cover?”
- “Is security training mandatory for all employees?”
- “What was your training completion rate last year?”
Evidence to have ready
- Training completion records
- The training curriculum or course list
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.