Training Modules - Introduction – Knowledge Base

This introduction will take you through every step involved in the creation and use of training modules.

Overview

What is a training module?
Training module deep-dive
Frequently Asked Questions
Multi-Lingual Training Videos

1. What is a training module?

A training module is a structured learning course which contains a mixture of educational content and quiz material. Employees can be assigned training modules by either creating a dedicated security awareness training campaign or by having it assigned to them after they fall for a simulated phishing attack.

Each training module is designed to teach the learner about a specific topic of cyber security, whether it be about phishing, ransomware, secure internet browsing or even just cyber security in general. Each training course is designed to provide employees with a micro-learning experience and can be completed in under 10 minutes.

2. Training module deep-dive

Training Module Page Options:

New Training Module: A single-page module creation popup appears. Designed for speed and efficiency.
View Training Module: Opens the training module, letting you see a live view of what an employee would see.
Update Training Module: Provides the ability to view and update the back-end configuration used to deliver the training module
Delete Training Module: Provides the ability to delete a training module.

Training Module Creation/Update:

Module Name: The unique name given to the training module
Passing Score: The minimum score an employee must obtain to pass the training module (0-100%)
Training Pages:
- Statements: Educational statement that an employee learns from. Typically precedes a question.
  - Statement Title: A short title of what the statement relates to.
  - Statement Content: A brief statement on what we want to educate the learner on.
  - Additional Content: Additional information we can present to a learner.
    - No Additional Content: No additional content
    - Embedded Video URL: Displays a video below the statement title and content
      - Embedded Video URL: URL of the video - can either be on YouTube/Vimeo or a .mp4. If a YouTube/Vimeo video, please ensure the URL provided is designed for embedded use (e.g. https://www.youtube.com/embed/yrrOM3QkZXk). This can be obtained by right clicking the video and copying embed code, then extracting the embedded URL from within it).
    - Spot the Phish Guided Walkthrough: Guided clickable walkthrough on how to spot a phish
    - Navbar Content: Provides three tabs within the page to present more educational content
      - Navbar Title: Brief Short title of the additional content.
      - Navbar Description: Brief statement on what we want to educate the learner on.
- Questions: Question to present to the learner. All questions are graded at the end of the module.
  - Question Type: Questions can either be multiple choice or a true/false statement.
    - Multiple Choice: Learner has to choose the correct option out of 4 possible answers.
      - Question Options: Specify a brief statement on a potential answer and whether or not that answer is correct.
    - True or False: Describe whether the question outlined is True or False.
  - Answer Description: Provide a short description on what the correct answer is and why.

3. Frequently Asked Questions

If I assign the same training module to the same employee back-to-back twice, will they need to complete that training module twice? No. We have built-in functionality which checks if an employee already has an active training assignment for a given training module. If they do, we won't re-assign the training, we'll instead track the status of the already assigned training across multiple campaigns.
How do employees access their training modules to complete them? At the time of assignment, we will send employees an email which contains all the information they need. We'll send across their username, an access token, login URL (https://learn.caniphish.com/Platform/Login) and an overview of which training modules have been assigned.
How long do employees have to complete a training module? All modules must be completed within 14 days of assignment - however this can be modified during campaign setup. If a module isn't completed, we'll mark the assignment as Overdue until the employee obtains a passing score.
Are employees sent reminders of which training modules they have assigned and when they are due? Yes. We will send reminders to employees on Days 1, 3, 6, 10, 14, 16, 18, 20, 22, 26, 30, 35, 40, 48 and 60. If an employee doesn't complete a training module after Day 60, we will stop sending reminders.
What address will reminder emails come from and do I need to setup email allowlisting? Emails will appear to come from noreply@learn.caniphish.com (unless you have setup white-labelling and your own domain is in-use). We do recommend that these emails are allowlisted as they will likely end up in users Junk/Spam folders.

4. Multi-Lingual Training Videos

Multi-Lingual Voice Overs

CanIPhish training videos are available with voice-overs in various languages. Depending on the language specified in a browser or hardcoded in a training module, CanIPhish will dynamically select the appropriate voice-over.

English: Default Language (No language code)
French (European): Language code is "FR"
Spanish (LATAM): Language code is "ES"
Portuguese (Brazilian): Language code is "PT"

Voice-over languages currently on roadmap: Arabic, Hindi, Mandarian.

If you would like to manually hardcode the language of a video, simply add the relevant language code just before the ".mp4" filetype (towards the end of the URL). Below is an example video URL with the French language code:

https://d3p8e1mvy30w84.cloudfront.net/videos/ransomware-FR.mp4

All Video URLs:

Ransomware Video: https://d3p8e1mvy30w84.cloudfront.net/videos/ransomware.mp4
Phishing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/phishing-training-video.mp4
Cyber-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/cyber-security.mp4
HIPAA Video: https://d3p8e1mvy30w84.cloudfront.net/videos/hipaa.mp4
Secure-Internet-Browsing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-internet-browsing.mp4
Multi-Factor-Authentication Video: https://d3p8e1mvy30w84.cloudfront.net/videos/multi-factor-authentication.mp4
Physical-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/physical-security.mp4
Remote-Working Video: https://d3p8e1mvy30w84.cloudfront.net/videos/remote-working.mp4
Device-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/device-security.mp4
Education-Provider-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/education-provider-best-practices.mp4
Small-Business-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/small-business-best-practices.mp4
Financial-Industry-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/financial-institution-best-practices.mp4
Healthcare-Industry-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/healthcare-best-practices.mp4
Critical-Infrastructure-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/critical-infrastructure-best-practices.mp4
Government-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/government-best-practices.mp4
SOC2-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/soc2-fundamentals.mp4
Situational-Awareness Video: https://d3p8e1mvy30w84.cloudfront.net/videos/situational-awareness.mp4
Secure-Software-Development Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-software-development.mp4
Secure-Credit-Card-Handling Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-credit-card-handling.mp4
Privileged-User Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privileged-user.mp4
Privacy-Awareness Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privacy-awareness.mp4
Insider-Threats Video: https://d3p8e1mvy30w84.cloudfront.net/videos/insider-threats.mp4
GDPR-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/gdpr-fundamentals.mp4
Defence-in-Depth Video: https://d3p8e1mvy30w84.cloudfront.net/videos/defence-in-depth.mp4
ISO27001-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/iso27001-fundamentals.mp4

How do I see the language a browser is set to?

If you're using Google Chrome, you can see this by either typing "chrome://settings/languages" into the URL section of the browser, or by clicking Settings > Languages.

Multi-Lingual Closed Captions

Where voice-overs aren't available, we support the use of multi-lingual closed captions. To leverage closed captions, please update the respective training modules to use the video URLs outlined below. Each URL points to a YouTube video on a channel we control. These YouTube videos contain captions that can automatically translate to one of 75 different languages.

Ransomware Video: https://www.youtube.com/embed/yrrOM3QkZXk
Phishing Video: https://www.youtube.com/embed/gx06rhV_Caw
Cyber-Security Video: https://www.youtube.com/embed/qZHxqRyZfz4
HIPAA Video: https://www.youtube.com/embed/4MslUIuNs0I
Secure-Internet-Browsing Video: https://www.youtube.com/embed/PZq-04M5I4Y
Multi-Factor-Authentication Video: https://www.youtube.com/embed/smmdBG59hOs
Physical-Security Video: https://www.youtube.com/embed/9LFmTRkEFNg
Remote-Working Video: https://www.youtube.com/embed/8DAolLkt830
Device-Security Video: https://www.youtube.com/embed/-1_r2dAPkic
Education-Provider-Best-Practices Video: https://www.youtube.com/embed/1B6FWyLMeG0
Small-Business-Best-Practices Video: https://www.youtube.com/embed/iQ7K81jHL-Y
Financial-Industry-Best-Practices Video: https://www.youtube.com/embed/U9mlHCV2C9M
Healthcare-Industry-Best-Practices Video: https://www.youtube.com/embed/S5EI1B5BWOk
Critical-Infrastructure-Best-Practices Video: https://www.youtube.com/embed/h1RPfncD16A
Government-Best-Practices Video: https://www.youtube.com/embed/h-v7K3Ps0I4
SOC2-Fundamentals Video: https://www.youtube.com/embed/xNVdULWhgjQ
Situational-Awareness Video: https://www.youtube.com/embed/QLddxKBEt_c
Secure-Software-Development Video: https://www.youtube.com/embed/JjGgQr3kl0M
Secure-Credit-Card-Handling Video: https://www.youtube.com/embed/p5WJeb7M2ec
Privileged-User Video: https://www.youtube.com/embed/9LJKbAeq1vE
Privacy-Awareness Video: https://www.youtube.com/embed/OJdLacsVht8
Insider-Threats Video: https://www.youtube.com/embed/r1HZdHLHDKM
GDPR-Fundamentals Video: https://www.youtube.com/embed/r_KTdTO_cqU
Defence-in-Depth Video: https://www.youtube.com/embed/8_NY7guxrLA
ISO27001-Fundamentals Video: https://www.youtube.com/embed/igFtnnwhq6M

To activate captions automatically, just add the following querystring (replacing the 'es' with your preferred language code) to the end of embedded youtube video link:
?cclangpref=es&ccloadpolicy=1

E.g. for the Ransomware video, it would look like this:
https://www.youtube.com/embed/yrrOM3QkZXk?cc_lang_pref=es&cc_load_policy=1

If your users speak a language other than English, Spanish, Italian, French or Polish and you want captions to load automatically, please contact the team at CanIPhish and provide us with your language, as we need to enable this functionality on a language-by-language basis.