workflow
Security Awareness Training Campaign
Security Awareness Training Campaign as a decision-aware workflow covering curriculum, launch, completion tracking, phishing simulation, escalation of non-completers, and effectiveness reporting. It runs on the EXISTING security-awareness training Control item (framework iso-27001 / nist-800-53, domains include awareness_training, control_owner = campaign owner): each cycle is one workflow instance attached to that Control — enriching it, never creating a duplicate control — and the prior cycle's archived instance on the same Control is the baseline for content refresh and simulation trends. No upstream workflow feeds this campaign; each cycle is driven by the campaign charter (trigger, window, audience segments, inclusion/exclusion rules, mandated topics, completion target, and phishing click/report thresholds) supplied at launch, together with the HR headcount and contractor/vendor rosters and the prior campaign report. In scope: running one campaign cycle end-to-end for all in-scope staff, contractors, and third parties with system access, against the campaign charter. Out of scope: routine LMS administration outside a campaign and HR disciplinary action beyond the policy consequence ladder. The named deliverables are the campaign effectiveness report and the indexed evidence archive, presented to the security governance / management review forum. No downstream workflow consumes it; the next cycle and any interim micro-training are scheduled at close (recorded on the campaign record — AssureSwarm has no compliance-calendar surface).
In catalog since 2026-09-17T22:28:00Z · Last changed 2026-10-04T21:48:26Z (791ff2dd3a45)
Record JSON · Open in map · Data retrieval guide
Catalog revision: 791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4. A connection does not establish full coverage.
Attributes
- domain
- controls
- department
- it
- lineOfDefense
- operate
Details
- teams
- it
- hr
- domains
- controls
- standards
- iso-27001
- nist-800-53
- sourceTemplateId
- workflow-library:controls-security-awareness-training
- releaseId
- sha256:5f8eafdd86a77d42bb98053dcbbdbab76d7f75bfbb58d9e14e70275bdc712276
- canonicalUrl
- https://evidenceflows.com/workflows/all/?w=controls-security-awareness-training
- capabilities
- mappingStatus
- mapped
- lineOfDefense
- operate
- controls
- UC-TRAIN-01
- UC-TRAIN-03
- UC-TRAIN-02
- roleIntegrity
- activityCount
- 0
- ermPhases
- lineRoles
- serviceModes
- warnings
Source
No record-specific source URL is provided.
Download workflow template · Release: sha256:5f8eafdd86a77d42bb98053dcbbdbab76d7f75bfbb58d9e14e70275bdc712276
Connections
- Security Awareness Training Campaign operates UC-TRAIN-02 — Train personnel with specialized security roles and duties
- Security Awareness Training Campaign operates UC-TRAIN-01 — Deliver security awareness training to all personnel
- Security Awareness Training Campaign operates UC-TRAIN-03 — Record training completion and measure effectiveness