SOC2 requires covered entities to implement a security awareness training program. Learn how Guardey helps your organization become SOC2-compliant.
No payment information required
SOC2 requires that organizations keep employees up-to-date about current cyber threats and your security policies with ongoing training. With Guardey, users get a weekly challenge about a different security topic that takes three minutes to complete.
Training should be tailored to specific roles, especially for high-risk roles such as IT, finance, and human resources. Create your own custom content or assign modules from Guardey’s public library to ensure every person gets the training they need.
Organizations are required to regularly evaluate the effectiveness of training with quizzes. Use Guardey to keep a pulse on performance every week and identify areas for improvement.
SOC2 auditors look for documentation on who has completed the training Guardey helps you show the participation rate and the overall performance with weekly reports and a real-time dashboard.
“Being ISO 27001 certified comes with many responsibilities for our employees. This means we have to make our staff aware of cyber threats and be able to show that we’re doing enough to do so. That's why we use Guardey.”
Dan Roozemond
Data science lead
“The uptick in training participation has been fantastic. Employees have even set up their own little Guardey competitions internally. So we have the company-wide leaderboard, but the teams themselves are now even having their little competitions in Microsoft Teams group chats. Guardey has brought out the competitive nature in them.”
Jonathan Farrell
Information and Quality Assurance Manager
“Our cyber insurance company AIG requires us to train our staff. They really like the fact that we use Guardey because you train every week and you learn about a wide range of different cyber security topics.”
Geertjan van der Meer
Assistant accountant
“Together with the Guardey team, we came up with an email centered around a Christmas gift voucher that we send out every year. I was curious about how our employees would react. It turns out that quite a few employees clicked the phishing link and even entered personal data. This made it clear that we had to start training security awareness.”
Marcel Versluis
IT manager
