{"catalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","download":{"releaseId":"sha256:5f8eafdd86a77d42bb98053dcbbdbab76d7f75bfbb58d9e14e70275bdc712276","slug":"controls-security-awareness-training","url":"/assets/agent_workflow-controls-security-awareness-training-4a332ba9.3897a33542434a02.json"},"kind":"record","record":{"attributes":{"department":"it","domain":"controls","lineOfDefense":"operate"},"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=controls-security-awareness-training","description":"Security Awareness Training Campaign as a decision-aware workflow covering curriculum, launch, completion tracking, phishing simulation, escalation of non-completers, and effectiveness reporting. It runs on the EXISTING security-awareness training Control item (framework iso-27001 / nist-800-53, domains include awareness_training, control_owner = campaign owner): each cycle is one workflow instance attached to that Control — enriching it, never creating a duplicate control — and the prior cycle's archived instance on the same Control is the baseline for content refresh and simulation trends. No upstream workflow feeds this campaign; each cycle is driven by the campaign charter (trigger, window, audience segments, inclusion/exclusion rules, mandated topics, completion target, and phishing click/report thresholds) supplied at launch, together with the HR headcount and contractor/vendor rosters and the prior campaign report. In scope: running one campaign cycle end-to-end for all in-scope staff, contractors, and third parties with system access, against the campaign charter. Out of scope: routine LMS administration outside a campaign and HR disciplinary action beyond the policy consequence ladder. The named deliverables are the campaign effectiveness report and the indexed evidence archive, presented to the security governance / management review forum. No downstream workflow consumes it; the next cycle and any interim micro-training are scheduled at close (recorded on the campaign record — AssureSwarm has no compliance-calendar surface).","details":{"canonicalUrl":"https://evidenceflows.com/workflows/all/?w=controls-security-awareness-training","capabilities":[],"controls":["UC-TRAIN-01","UC-TRAIN-03","UC-TRAIN-02"],"domains":["controls"],"lineOfDefense":"operate","mappingStatus":"mapped","releaseId":"sha256:5f8eafdd86a77d42bb98053dcbbdbab76d7f75bfbb58d9e14e70275bdc712276","roleIntegrity":{"activityCount":0,"ermPhases":[],"lineRoles":[],"serviceModes":[],"warnings":[]},"sourceTemplateId":"workflow-library:controls-security-awareness-training","standards":["iso-27001","nist-800-53"],"teams":["it","hr"]},"download":{"releaseId":"sha256:5f8eafdd86a77d42bb98053dcbbdbab76d7f75bfbb58d9e14e70275bdc712276"},"history":{"digest":"08afbf2277030c5ad7efba1cda91471d69deb79999f650a4c3177126fc6a1ae2","firstSeenAt":"2026-09-17T22:28:00Z","firstSeenRevision":"f368a6cce277037e4b1e1ff46004e3acd295f96c9ac63a411a0e45775a7f468e","updatedAt":"2026-10-04T21:48:26Z","updatedRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4"},"id":"wf:C15","mapUrl":"https://evidenceflows.com/?v=1&node=wf%3AC15","slug":"controls-security-awareness-training","sourceIds":["iso-27001","nist-800-53","nist-csf-2","nydfs-500"],"sourceUrl":null,"title":"Security Awareness Training Campaign","type":"workflow"},"relationships":[{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:6a719b66719db37dbad8afddc1978a5f8f76e7b036f2710e5e64d0b6e3f993f6","properties":{},"sourceDetailPath":"/data/v1/records/wf-c15-3675020d.json","sourceId":"wf:C15","targetDetailPath":"/data/v1/records/uc-uc-train-02-88898a0b.json","targetId":"uc:UC-TRAIN-02","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:ad5c470d3acd9952e494e7d4cb2470c44d8347b0648827887adf264d04a114b7","properties":{},"sourceDetailPath":"/data/v1/records/wf-c15-3675020d.json","sourceId":"wf:C15","targetDetailPath":"/data/v1/records/uc-uc-train-01-5f513831.json","targetId":"uc:UC-TRAIN-01","type":"operates"},{"expectedCatalogRevision":"791ff2dd3a45707290badee660f185e514d15f1cf518908628f425c2f2c56ee4","id":"rel:db711a0d962cbd511f70a565867e6ddc193065ed176b34f4b94ca3aaa51c3ec2","properties":{},"sourceDetailPath":"/data/v1/records/wf-c15-3675020d.json","sourceId":"wf:C15","targetDetailPath":"/data/v1/records/uc-uc-train-03-7125ac3e.json","targetId":"uc:UC-TRAIN-03","type":"operates"}],"schemaVersion":1}