Assign training to the people a control actually depends on, score it, and keep the result as evidence. Awareness stops being an assertion in a policy document and becomes a record with names and dates against it.
- Targeted assignment by role, unit or control
- Scored completion records with retention rules
- Evidence surfaced against the controls it supports
- Audit-logged, exportable for the auditor