Master your team's cybersecurity compliance training

Customs-Trade Partnership Against Terrorism

California Consumer Privacy Act

• Introduction to CCPA
• Need to Know: Privacy by Design

Criminal Justice Information Services

• CJIS Security Policy
• CJIS: Handling CJI
• CJIS Policy: Dissemination and Destruction
• CJIS Policy: Media Protection
• CJIS Policy: Physical Security

Children’s Online Privacy Protection Act

• COPPA

• CPNI for Consumers
• CPNI for Providers

Electronic Funds Transfer Act

• Electronic Funds Transfer Act (EFTA)

Fair and Accurate Credit Transactions Act

Federal Acquisition Regulation

Defense Federal Acquisition Regulation Supplement

• Introduction to DFARS

Foreign Corrupt Practices Act

Family Educational Rights and Privacy Act

• FERPA
• FERPA For K-12
• FERPA For Post-Secondary Education

Financial Industry Regulatory Authority

General Data Protection Regulation

• Privacy and EU GDPR
• GDPR – Consequences of Non-compliance (Video)
• GDPR for Data Processors
• GDPR for Executives
• GDPR for Managers
• Need to Know: Privacy by Design

Gramm–Leach–Bliley Act

• Gramm-Leach-Bliley Act (GLBA)

Health Insurance Portability and Accountability Act

Health Information Technology for Economic and Clinical Health Act

• HIPAA HITECH
• Introduction To HIPAA
• HIPAA Minimum Necessary Standard
• HIPAA/HITECH for Healthcare Executives
• HIPAA/HITECH for Healthcare Managers
• PHI Policy
• Consequences of PHI Release

Internal Revenue Code 6103

• Protecting Federal Tax Information

Information Security Management Standard

• Infosec IQ content library

National Institute of Standards and Technology Special Publication 800-171

• Introduction to NIST 800-171
• Complying with NIST 800-171
• Protecting CUI

Payment Card Industry Data Security Standard

• PCI DSS
• PCI DSS Overview
• PCI DSS Brief
• PCI DSS: Threats to Cardholder Data
• PCI DSS: Transaction Types
• PCI DSS: Incident Management
• PCI DSS: Account Data
• PCI DSS: Protecting Networks and Systems
• PCI DSS: Physical Security

Personal Information Protection and Electronic Documents Act

Service Organization Controls 2

• Infosec IQ content library

Sarbanes–Oxley Act

Social Security Act Section 1106

Compliance training is employee education required by legislation or regulations. Compliance training may also refer to education mandated or recommended via industry standards, frameworks or internal policies. Although some compliance mandates specify training topics or types, many include general requirements (e.g., provide annual security awareness training for all employees).

Compliance training is woven into our programs, so specific examples depend on the role, the job level, the goal of the employee and the courses necessary to fulfill their needs. Infosec IQ offers training for a variety of compliance needs: HIPAA, PCI DSS, GLBA, SOX, FERPA, GDPR, OWASP, DFARs and more. In addition, our Infosec Skills technical training and live boot camps help ensure you meet 8140/8570 certification requirements, help prepare for CMMC assessments, and align with other frameworks and best practices, such as the MITRE ATT&CK® Framework and Workforce Framework for Cybersecurity.

Meeting compliance is one part of security awareness training, but it is a crucial element for doing business in our interconnected world. Our programs are built to include training that helps you stay compliant with industry-recognized regulations, like HIPPA, PCI, DSS, GDPR, CCPA, FERPA, and more. 

In addition, all of our technical training maps to the Workforce Framework for Cybersecurity (NICE Framework) and our certification boot camps ensure you stay compliant with DoD 8570.01-M.

Cybersecurity compliance training teaches the best practices and protocols to protect sensitive information. It empowers employees to identify and respond to potential security threats, helps them take responsible online action and keeps the importance of data privacy top-of-mind.

Implement compliance measures in your organization in a few steps:

• Assess and identify the relevant compliance requirements, from industry-specific regulations to general best practices.

•  Develop policies and procedures to address requirements: define roles, establish protocols and create documentation.

• Provide training and education to all employees to ensure they understand and adopt best compliance implementation practices.

•  Include regular audits and monitoring processes to assess compliance levels and identify areas for improvement. Keep up with evolving compliance standards with consistent communication and updates.

• Establish a culture of compliance, where everyone feels invested in maintaining a secure and compliant environment.

Yes. The Infosec IQ security awareness and simulated phishing platform includes everything you need to deliver — and document — security awareness training for all employees and prove compliance.

The NIST Cybersecurity Framework is a voluntary set of standards, guidelines and best practices to help organizations manage cybersecurity-related risk. The Framework outlines five core functions used to help organizations organize basic cybersecurity activities: Identify, Protect, Detect, Respond and Recover. The Protect function identifies security awareness training as a key component to an effective cybersecurity program.

To align with NIST recommendations, organizations should ensure “personnel and partners are provided cybersecurity awareness education and are trained to perform their cybersecurity-related duties and responsibilities consistent with related policies, procedures, and agreements.”

NIST provides guidance on security awareness and training topics in its special publications and encourages organizations to train employees on phishing, social engineering, password security, safe web browsing, physical security and more.

All Infosec IQ security awareness training content is mapped to the NIST Cybersecurity Framework and special publication recommendations to make it easy for any organization to build an effective employee training program into their cybersecurity strategy.

Mandatory security awareness training doesn’t have to be boring. The most effective security awareness training blends training topics and best practices with relevant scenarios, engaging storytelling and relatable characters. This allows you to keep employees engaged and inspire behavior change while accounting for compliance requirements.