This introduction will take you through every step involved in the creation and use of training modules.
Overview
- What Is A Training Module?
- Training Module Deep-Dive
- Training Module Translations
- Multi-Lingual Training Videos
- Frequently Asked Questions
1. What Is A Training Module?
A training module is a structured learning course which contains a mixture of educational content and quiz material. Employees can be assigned training modules by either creating a dedicated security awareness training campaign or by having it assigned to them after they fall for a simulated phishing attack.
Each training module is designed to teach the learner about a specific topic of cyber security, whether it be about phishing, ransomware, secure internet browsing or even just cyber security in general. Each training course is designed to provide employees with a micro-learning experience and can be completed in under 10 minutes.
2. Training Module Deep-Dive
Training Module Page Options:
- New Training Module: A single-page module creation popup appears. Designed for speed and efficiency.
- View Training Module: Opens the training module, letting you see a live view of what an employee would see.
- Update Training Module: Provides the ability to view and update the back-end configuration used to deliver the training module.
- Duplicate Training Module: Creates a duplicate training module, usually used for editing purposes while keeping the original intact.
- Delete Training Module: Provides the ability to delete a training module.
- Training Language: To hardcode language preferences, use the dropdown list.
Training Module Creation/Update:
- Module Name: The unique name given to the training module
- Passing Score: The minimum score an employee must obtain to pass the training module (0-100%)
- Training Pages:
-
Statements: Educational statement that an employee learns from. Typically precedes a question.
- Statement Title: A short title of what the statement relates to.
- Statement Content: A brief statement on what we want to educate the learner on.
-
Additional Content: Additional information we can present to a learner.
- No Additional Content: No additional content
-
Embedded Video URL: Displays a video below the statement title and content
- Embedded Video URL: URL of the video - can either be on YouTube/Vimeo or a .mp4. If a YouTube/Vimeo video, please ensure the URL provided is designed for embedded use (e.g. https://www.youtube.com/embed/yrrOM3QkZXk). This can be obtained by right clicking the video and copying embed code, then extracting the embedded URL from within it).
- View Lock: By enabling view lock, learners will need to watch the video from beginning to end before they can proceed to the next page (Note: This setting will only function for .mp4 videos).
- Spot the Phish Guided Walkthrough: Guided clickable walkthrough on how to spot a phish
-
Navbar Content: Provides three tabs within the page to present more educational content
- Navbar Title: Brief Short title of the additional content.
- Navbar Description: Brief statement on what we want to educate the learner on.
-
Questions: Question to present to the learner. All questions are graded at the end of the module.
-
Question Type: Questions can either be multiple choice or a true/false statement.
-
Multiple Choice: Learner has to choose the correct option out of 4 possible answers.
- Question Options: Specify a brief statement on a potential answer and whether or not that answer is correct.
- True or False: Describe whether the question outlined is True or False.
-
Multiple Choice: Learner has to choose the correct option out of 4 possible answers.
- Answer Description: Provide a short description on what the correct answer is and why.
-
Question Type: Questions can either be multiple choice or a true/false statement.
-
Statements: Educational statement that an employee learns from. Typically precedes a question.
Training Module Markdown Syntax
You can embed formatted hyperlinks and bolded text within training modules by using the markdown syntax outlined below:
-
Hyperlink Markdown: To create a link, enclose the link text in brackets (e.g., [CanIPhish]) and then follow it immediately with the URL in parentheses (e.g., (https://caniphish.com)).
- Example: I love [CanIPhish](https://caniphish.com).
-
Bolded Text Markdown: To bold text, add two asterisks before and after a word or phrase. To bold the middle of a word for emphasis, add two asterisks without spaces around the letters.
- Example: I love **CanIPhish**
For your benefit, we've included a couple example screenshots below:
Training Module Editor (Admins View)
Training Module Page (Learners View)
3. Training Module Translations
CanIPhish uses machine learning to provide users with a highly flexible two-way language translation capability. So, for example, if you were to update a training module in English, we would use machine learning to translate any updates in all 74 supported languages. Additionally, if you were to update a training module in a non-English language, we would use machine learning to translate that module into every other language as well.
This is helpful for scenarios where you might want to create a custom module in a specific language that's targeted towards employees in a specific country. Some employees may want to complete that module in a different language, and if they specify a different language preference in their browser settings or their learner dashboard language preference, we will translate your module into their preferred language.
Additionally, if you're using our out-of-the-box videos, don't worry about applying any language codes to these - at the time of page load, we look at the language that the module is displayed in and dynamically select the appropriate language voiceover.
Language Translation Order Of Precedence:
The language that a training module is displayed in can be set in various locations and configurations, both by CanIPhish Administrators and the Learners themselves. There is an order of precedence to how these configurations are interpreted, which is outlined below:
- Learner Manually Specifies Language Within Learner Dashboard: Within the learner dashboard, learners can manually specify their preferred language by clicking into the settings dropdown at the top-right of the screen. If a language preference has been manually set, a language cookie is saved to the learner's browser, which has the highest order of language translation precedence (meaning lower-order preferences are ignored).
- Administrator Manually Specifies Language Within Campaign: When creating a Campaign, the language that training modules are displayed in can be manually specified by the Administrator. By default, the language preference is set to "Dynamic Translation", which uses the learner's browser settings to determine the most appropriate language. However, the language can also be hardcoded such that the module will ignore the learner's browser settings and instead load in the hardcoded language.
4. Multi-Lingual Training Videos
Multi-Lingual Voice Overs
CanIPhish training videos are available with voice-overs in 29 languages. Depending on the language specified in a browser or hardcoded in a training module, CanIPhish will dynamically select the appropriate voice-over.
- English: Default Language (No language code)
- French (European): Language code is "FR"
- Spanish (LATAM): Language code is "ES"
- Portuguese (Brazilian): Language code is "PT"
- Chinese (Mandarin): Language code is "ZH"
- Arabic: Language code is "AR"
- Hindi: Language code is "HI"
- Italian: Language code is "IT"
- Korean: Language code is "KO"
- Dutch: Language code is "NL"
- Turkish: Language code is "TR"
- Swedish: Language code is "SV"
- Indonesian: Language code is "ID"
- Filipino: Language code is "FIL"
- Japanese: Language code is "JA"
- Ukrainian: Language code is "UK"
- Greek: Language code is "EL"
- Czech: Language code is "CS"
- Finnish: Language code is "FI"
- Romanian: Language code is "RO"
- Russian: Language code is "RU"
- Danish: Language code is "DA"
- Bulgarian: Language code is "BG"
- Malay: Language code is "MS"
- Slovak: Language code is "SK"
- Croatian: Language code is "HR"
- Tamil: Language code is "TA"
- Polish: Language code is "PL"
-
German: Language code is "DE"
If you would like to manually hardcode the language of a video, simply add the relevant language code just before the ".mp4" filetype (towards the end of the URL). Below is an example video URL with the French language code:
https://d3p8e1mvy30w84.cloudfront.net/videos/ransomware-FR.mp4
All Video URLs:
- Ransomware Video: https://d3p8e1mvy30w84.cloudfront.net/videos/ransomware.mp4
- Phishing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/phishing-training-video.mp4
- Cyber-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/cyber-security.mp4
- HIPAA Video: https://d3p8e1mvy30w84.cloudfront.net/videos/hipaa.mp4
- Secure-Internet-Browsing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-internet-browsing.mp4
- Multi-Factor-Authentication Video: https://d3p8e1mvy30w84.cloudfront.net/videos/multi-factor-authentication.mp4
- Physical-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/physical-security.mp4
- Remote-Working Video: https://d3p8e1mvy30w84.cloudfront.net/videos/remote-working.mp4
- Device-Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/device-security.mp4
- Education-Provider-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/education-provider-best-practices.mp4
- Small-Business-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/small-business-best-practices.mp4
- Financial-Industry-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/financial-institution-best-practices.mp4
- Healthcare-Industry-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/healthcare-best-practices.mp4
- Critical-Infrastructure-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/critical-infrastructure-best-practices.mp4
- Government-Best-Practices Video: https://d3p8e1mvy30w84.cloudfront.net/videos/government-best-practices.mp4
- SOC2-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/soc2-fundamentals.mp4
- Situational-Awareness Video: https://d3p8e1mvy30w84.cloudfront.net/videos/situational-awareness.mp4
- Secure-Software-Development Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-software-development.mp4
- Secure-Credit-Card-Handling Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-credit-card-handling.mp4
- Privileged-User Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privileged-user.mp4
- Privacy-Awareness Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privacy-awareness.mp4
- Insider-Threats Video: https://d3p8e1mvy30w84.cloudfront.net/videos/insider-threats.mp4
- GDPR-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/gdpr-fundamentals.mp4
- Defence-in-Depth Video: https://d3p8e1mvy30w84.cloudfront.net/videos/defence-in-depth.mp4
- ISO27001-Fundamentals Video: https://d3p8e1mvy30w84.cloudfront.net/videos/iso27001-fundamentals.mp4
- Smishing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/smishing.mp4
- Social Media Scams Video: https://d3p8e1mvy30w84.cloudfront.net/videos/social-media-scams.mp4
- Vishing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/vishing.mp4
- Using Artificial Intelligence Securely Video: https://d3p8e1mvy30w84.cloudfront.net/videos/using-artificial-intelligence-securely.mp4
- Web 3.0 And Blockchain Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/web-3-and-blockchain-security.mp4
- Privacy Act Australia Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privacy-act-australia.mp4
- PSPF Fundamentals Australia Video: https://d3p8e1mvy30w84.cloudfront.net/videos/pspf-australia.mp4
- NIST CSF USA Video: https://d3p8e1mvy30w84.cloudfront.net/videos/nist-csf-united-states.mp4
- PDPA Singapore Video: https://d3p8e1mvy30w84.cloudfront.net/videos/pdpa-singapore.mp4
- DPA United Kingdom Video: https://d3p8e1mvy30w84.cloudfront.net/videos/dpa-united-kingdom.mp4
- PIPL China Video: https://d3p8e1mvy30w84.cloudfront.net/videos/pipl-china.mp4
- POPI Act South Africa Video: https://d3p8e1mvy30w84.cloudfront.net/videos/popi-act-south-africa.mp4
- DPDP Act India Video: https://d3p8e1mvy30w84.cloudfront.net/videos/dpdp-act-india.mp4
- Privacy Act New Zealand Video: https://d3p8e1mvy30w84.cloudfront.net/videos/privacy-act-new-zealand.mp4
- CCPA USA Video: https://d3p8e1mvy30w84.cloudfront.net/videos/ccpa-united-states.mp4
- Password Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/password-security.mp4
- WiFi Security Video: https://d3p8e1mvy30w84.cloudfront.net/videos/wifi-security.mp4
- QR Phishing Video: https://d3p8e1mvy30w84.cloudfront.net/videos/qr-phishing.mp4
- Shadow IT Video: https://d3p8e1mvy30w84.cloudfront.net/videos/shadow-it.mp4
- Secure Traveling Video: https://d3p8e1mvy30w84.cloudfront.net/videos/secure-traveling.mp4
- Threat Actors Video: https://d3p8e1mvy30w84.cloudfront.net/videos/threat-actors.mp4
- Deepfake Awareness Video: https://d3p8e1mvy30w84.cloudfront.net/videos/deepfake-awareness.mp4
- Supply Chain Risk Video: https://d3p8e1mvy30w84.cloudfront.net/videos/supply-chain-risk.mp4
- Impersonation Scams Video: https://d3p8e1mvy30w84.cloudfront.net/videos/impersonation-scams.mp4
- AI Scams Video: https://d3p8e1mvy30w84.cloudfront.net/videos/ai-scams.mp4
How do I see the language a browser is set to?
If you're using Google Chrome, you can see this by either typing "chrome://settings/languages" into the URL section of the browser, or by clicking Settings > Languages.
5. Frequently Asked Questions
- Can you add subtitles to training videos? Yes, all our out-of-the-box training modules include subtitles. They can be activated by the user while watching the video, or at tenant level for all users. See this support article for more information.
- If I assign the same training module to the same employee back-to-back twice, will they need to complete that training module twice? No. We have built-in functionality which checks if an employee already has an active training assignment for a given training module. If they do, we won't re-assign the training, we'll instead track the status of the already assigned training across multiple campaigns.
- How do employees access their training modules to complete them? At the time of assignment, we will send employees an email which contains all the information they need. We'll send across their username, an access token, login URL (https://learn.caniphish.com/Platform/Login) and an overview of which training modules have been assigned.
- How long do employees have to complete a training module? All modules must be completed within 14 days of assignment - however this can be modified during campaign setup. If a module isn't completed, we'll mark the assignment as Overdue until the employee obtains a passing score.
- Are employees sent reminders of which training modules they have assigned and when they are due? Yes. This setting can be controlled on the Platform Management page under Notification Settings. By default, reminders are sent every 3 days up to a maximum of 60 days after the training was initially assigned.
- What address will reminder emails come from and do I need to setup email allowlisting? Emails will appear to come from noreply@learn.caniphish.com (unless you have setup white-labelling and your own domain is in-use). We do recommend that these emails are allowlisted as they will likely end up in users Junk/Spam folders.
-
How do I embed my own videos? Depending on the platform used to host your video (e.g. YouTube, Vimeo, Microsoft Streams), there are different embedding options available. To embed these videos in a training module, simply generate the embed code offered by these platforms and then copy the URL within the 'src' attribute of the provided iframe. An example is provided below:
-
Can I use cloud storage to host a video? Yes, you can host videos in cloud storage, but there are two kinds of services:
✔️ True cloud storage (like Google Cloud Storage, Amazon S3, or Azure Blob Storage) is designed to hold files and give you a direct web link to them. If you configure the file to be public, anyone with the link can stream it. Because the link points directly to the video file, it works seamlessly with CanIPhish training modules.
❌ Consumer file-sharing tools (like Google Drive, Dropbox, or OneDrive) focus on collaboration. They often show the video inside their own website or app, not as a raw file. Links from these services usually don’t work or provide a poor user experience.
Comments
0 comments
Please sign in to leave a comment.