Security Training
Assign security training to your people, let them complete it in the employee portal, and get graded, dated evidence of who passed, without a separate training vendor.
Almost every framework asks the same thing about your people: were they trained, on what, and when. Aegis answers it with a training module built into the program. You assign courses, employees take them in the employee portal, a quiz checks they understood, and every pass is recorded as evidence.
Courses
NexusVoid authors and maintains the course catalog. Each course is a short set of video lessons followed by a quiz. Two courses ship today:
| Course | Lessons | Quiz | Who gets it |
|---|---|---|---|
| All-Employees Security Awareness | Spot the Phish · Passwords and MFA · Handling Data · Device Security · Report It | 5 questions drawn from a bank of 10 | Everyone, automatically. This is the default course |
| Secure Development for Engineers | OWASP Top 10 · Secrets and Credentials · Secure Code Review · Dependencies and Supply Chain | 5 questions | The people you assign it to |
Both courses take a few minutes and have an 80% pass mark.
Assigning training
Training lives under Organisation › Training. Owners and admins can see and manage it. Auditors, employees and contractors cannot.
The page has two parts:
- Course catalog shows each published course with its lesson count, question count and pass mark. The default course is marked Default.
- Assignments is where you give a course to a group of people. Pick a course, an audience (Everyone, By role or By department), a cadence (Once, On onboarding or Recurring) and how many days people have to finish it (30 by default).
Creating an assignment enrolls every matching active member straight away, each with a due date counted from the day they were enrolled. The default course needs no assignment: everyone in the organization is enrolled in it.
How employees take a course
Employees see training as a task on the home page of the employee portal. Each course they are assigned gets its own card, with the default course first and the rest ordered by due date, and each card shows when the course is due or how long it has been overdue. The training task is done when every course is passed.
Watch the lessons, in order
Each lesson is a short video, and lessons unlock one at a time. A lesson has to be watched almost to the end before it can be completed, and the video cannot be skipped ahead past the part already watched.
Take the quiz
The quiz unlocks once every lesson is done. Questions are single-choice or "select all that apply". When a course has a question bank, each attempt draws a fresh random set from it.
Pass, or try again
Answers are graded on the server, exactly, with no partial credit. Below 80%, the employee is told their score and can try again with a new set of questions. Retakes are unlimited and every attempt is recorded.
Correct answers are never sent to the employee's browser, so the quiz cannot be passed by reading the page.
Tracking progress
The progress view shows one card per course, with a count of who has passed, who is in progress and who has not started. Each row lists the employee, their status, their latest score and the date they completed the course. A course that is not finished by its due date is marked overdue. A failed quiz does not end the course: the employee stays in progress until they pass.
Training also shows on each person's page in Organisation: a Training tab lists every course assigned to them with its status, score and completion or due date. For a passed course you can download a certificate with the course, the employee, their score and the completion date.
Evidence
The first time an employee passes a course, Aegis files a Security Awareness Training evidence record with the course, the employee, their score and the completion date. It appears under Documents alongside your other evidence, where auditors with access can review it. If your organization requires evidence approval, the record waits for approval like any other evidence.
Training completion also feeds the people part of your readiness score on the Overview: a person counts as trained when they have passed the latest enrollment of every course assigned to them.
Re-training
Aegis checks training every day. Two things happen automatically:
- An enrollment that is not finished by its due date becomes overdue.
- A course passed more than six months ago is opened again, with 30 days to complete it, when it is the default course or is assigned to the person with a Recurring cadence. Courses assigned Once or On onboarding are not reopened. If someone is covered by more than one assignment for the same course, the most frequent cadence applies. A reopened course shows as not started again.
What training will not do yet
We would rather you know the limits than discover them in an audit.
- You cannot write your own courses. The catalog is authored by NexusVoid. Tell us which topics you need.
- Assignments go to groups, not individuals. You can assign to everyone, a role or a department. Assignments can be created and removed, not edited.
- The recurring interval is fixed at six months. It is not yet a setting.
- No reminder emails yet. Employees see due and overdue courses in the portal, and admins see them in the progress view.
- Training evidence is not yet mapped to individual controls. It counts toward people readiness and sits in Documents for your auditor, rather than closing a specific control on its own.
Next steps
Team, Roles & Auditor Access
Roles decide who can manage training and who takes it.
Evidence & Tasks
Where training evidence sits with the rest of your program.
Policies
Policy attestation, the other half of what you ask of your people.
Contact us
- Website: nexusvoidai.com
- LinkedIn: linkedin.com/company/nexusvoidai
- Email: ujwal@nexusvoidai.com