Security playbook · AI Employee: Sig

Compliance Training

> 95% completion on regulatory training

Install this playbookBack to marketplace
The problem

Compliance training is the annual chore everyone rushes through the last week before deadline. Security awareness training, code-of-conduct, harassment prevention, HIPAA (if healthcare), SOX (if public) — each has assigned deadlines, completion tracking, and audit exposure for missed completion. HR manages via spreadsheet + reminder emails; the last 15% of employees always slip; compliance runs the quarterly panic to close the gap.

At a glance
Trigger
Cron + HRIS event
Approvals
Manager notified on non-completion
What it does
Writes to your systems
Systems
LMS · HRIS
How it feels in production

An hour-by-hour walkthrough.

Q4 compliance training cycle kicks off. Sig assigns 4 mandatory courses to every employee: - Annual security awareness (30 min, phishing + password + data-handling) - Code of Conduct (20 min, ethics + gifts + conflicts) - Harassment Prevention (state-specific, 60 min) - Data Privacy (25 min, GDPR + CCPA) Personalized delivery per employee: - Assignment DM week 1: courses + deadline (60 days out) + estimated time - Reminder cadence: 30 days out, 15, 7, 3, 1 - Progress visibility: employee dashboard + manager dashboard - Role-specific supplements: engineering gets secure-coding module, finance gets SOX supplement Auto-tracking + escalation: - Weekly manager digest: their team's completion + at-risk employees - 3-days-past-due: manager cc'd on employee reminder - Past-due: escalation to manager-of-manager - Repeated non-completion: HR intervention By deadline, 98%+ completion. Audit sees timely completion + role-appropriate scope + retention of records for required period. No last-week scramble; training becomes an ongoing hygiene practice, not a fire drill.
How it works

Step by step.

  1. 01

    Assign role-appropriate curriculum

    Base curriculum per every-employee. Role supplements per function (engineering, finance, sales, HR). Jurisdiction-specific per location.

    LMS · Employee record · Curriculum matrix
  2. 02

    Personalized delivery + progress tracking

    Employee DM with assignment. Reminder cadence auto-adjusts to completion progress. Progress visible to employee + manager.

    Slack · Teams · LMS · Manager dashboard
  3. 03

    Weekly manager digest

    Manager sees their team's completion + at-risk. Enables coaching + team-level nudge before individual escalation.

    Slack · Teams · Manager dashboard
  4. 04

    Graduated escalation for non-completion

    3-day-late = manager cc, past-due = manager-of-manager, repeated = HR intervention. Consequences per policy.

    Escalation ladder · HR review
  5. 05

    Retention + audit-readiness

    Completion records retained per regulatory requirements. Audit report generatable on demand.

    LMS retention · Audit report
Systems and wiring

What you connect to make this run.

LMS · KnowBe4 · Ninjio · MediaPRO

read+write

Training platform. Course catalog + completion tracking + certificate issuance.

HRIS · Employee record

read

Role + location + tenure for curriculum assignment. New hires auto-enroll on start.

Slack · Teams · Email

read+write

Personalized delivery + reminders. Multi-channel to reach completion.

Audit log · Compliance record

read+write

Completion records retained per regulatory schedule. Audit-ready on demand.

What changes

Before and after, honestly.

Completion rate by deadline
Before
70-85%
After
97%+
HR hours per training cycle
Before
80-200 hours
After
10-25 hours (only escalations)
Last-week deadline scramble
Before
Always
After
Minimal (steady completion cadence)
Audit findings on training compliance
Before
3-10 per audit
After
Zero
Related

Playbooks that pair with this one.

Security

Phishing & Suspicious Email Triage

Phishing simulation as training reinforcement.

HR

Mandatory Training Assignment

Same delivery + tracking pattern for HR-managed training.

Security

SOC2 / Vanta Evidence Collection

Training completion is a SOC 2 control; evidence flows from LMS.

Frequently asked

Answers about this playbook.

What about role-specific training beyond compliance basics (developer secure-coding, admin privileged-access)?

Role supplements + skill-development modules. Same delivery + tracking; skill-based training separated from mandatory-compliance in dashboard.

How does it handle employees on leave during training window?

Deadline extended per leave period. Training due within X days of return. Fair + policy-appropriate.

What about contractors + temporary workers?

Contractor training scope typically narrower (security + data handling only). Configurable per engagement type.

How does it handle multi-language delivery?

Training content available in employee's preferred language where LMS supports. Completion tracking language-agnostic.

Can we test training effectiveness (not just completion)?

Yes — post-training quiz + phishing simulation results feed effectiveness measurement. Training content iterated based on effectiveness signals.

See it run on your data.

Free plan, no credit card. Connect the systems this playbook needs and run it against a past event first.

Book a demoMore Security playbooks