ÌÀÍ·Ìõ

Foundational Training is assigned to:

• All Staff with the exception of a few sub-populations (e.g., union, guest services, VTS) 
• All employees in specific units that have opted in
• Others are highly encouraged to take this training

Foundational training is assigned to new employees ~ 2 weeks after their start date. Existing employees are assigned annual refresher training every 12 months.

Enhanced Training is assigned to specific individuals that have access to sensitive data. This is assigned when specific criteria is triggered, such as a new researcher is added to a DUA project.

Compliance Training is assigned to those with access to or responsibility for data that is governed by law or regulation. This is assigned when specific criteria is triggered, such as a new employees is hired to handle GLBA data.

Once enrolled, trainees receive an email notification from it.risk@vanderbilt.edu that contains details for logging in and the due date.

Assigned cybersecurity awareness training is required to comply with federal regulations and our VU Security Training Standard.

It is the trainee's responsibility to complete training within 30 days. The Office of Cybersecurity is authorized to impose overdue sanctions until training is complete (e.g., notifying a trainee’s supervisor, mandatory password reset(s), withholding access, etc.).  

If you are a manager, you should see 2 dashboards when logged into the training platform. Toggle from My Dashboard to Team Dashboard to view the status of any direct reports. If one of your direct reports is also a manager, the Select a Team section allows you to choose which team you want to view on the Team Dashboard. Training status can be found by navigating the various tabs: Training Overdue, Training Due Soon, and Completed Training.

Note: Using the "view all" section can be misleading. It will show completion % of all training ever provided, even optional training.

Business Unit Entity (BUE) Approvers and other unit leaders have administrative access to the KnowBe4 console. They can view completion results for their unit in the "Reports" tab.

Navigate between the admin console and your training dashboard:

1. Click your name or email in the upper right corner
2. Select "Return to Console" or "My Training"

Pulling training reports:

1. From the admin console:
   1. Click the "Reports" tab
   2. There are 2 report types available. They are different views of the same data.
      1. Training Activity (Grouped by User)
      2. Training Status by Campaign
2. Use filters to narrow on the relevant Training Campaign and/or User Group:
   1. Training Campaign: Training Name (e.g., 2026 Foundational)
   2. User Group: Your business unit (e.g., 46000 - Information Technology)
3. "Manage Columns" to add or remove data fields (not available on all report types)
4. Export as PDF or CSV

An individual may be precluded from required training if they have taken comparable awareness training elsewhere or have a valid security course certification (e.g., Security+, SANS GSEC, etc.).

Proof of completion must be submitted to and granted by the Office of Cybersecurity. Requests may be .

Contact it.risk@vanderbilt.edu or . This team can check your training history and profile status. If a system error has occurred, they can also assist with correction.

Optional training is not required but is highly recommended. When logged in to KnowBe4, select the Library tab. Click on the  video that you wish to view. Check back regularly for new recommended training options.