Vanta - Security Awareness Training Integration

This integration allows CanIPhish to continuously stream security awareness training data into your Vanta account to automate various compliance checks across various compliance and regulatory frameworks.

To get started, please follow the below steps.

1. Login to your CanIPhish account: https://caniphish.com/Auth/Login
2. Traverse to the Integrations page: https://caniphish.com/User/UserProfile?queryType=ManageIntegrations
   Platform Settings > Integration Settings
3. Click the "Setup Integration" button:
   
   
4. You'll be redirected to Vanta with a prompt to login (or if you're already authenticated, you'll be directed to authorize the CanIPhish application). Click the Allow button:
   
   
5. You'll be redirected to the CanIPhish Integration Settings page and should be notified that the integration is now live:
   
   

Once the integration is live, you may need to enable the automated tests within Vanta if they are in a deactivated state. To do this, please follow the below steps:

1. Login to your Vanta account: https://app.vanta.com/
2. Traverse to the Tests page: https://app.vanta.com/tests
3. Ensure the following automated tests are enabled:
   • Security awareness training selected
     
   • General security awareness training records tracked
4. If either of the above tests are disabled, click into them and click the Activate or Reactivate button up the top-right:
   
   
5. You're all set! From here on, whenever a training is completed and it's applicable to the frameworks your monitoring, it will appear on the corresponding employees profile under Personnel > People (similar to the below screenshot):
   
   Additionally, if any training isn't completed in-line with your Vanta declared SLAs (e.g. 14 days for new employees to complete onboarding training), you will be notified of it via the automated control (similar to the below screenshot):
   
   

Note: CanIPhish syncs your security awareness training information to Vanta on an hourly basis. Because of this, it may take up to an hour for your data to appear in Vanta after the integration is completed.

Limitation Advisory Notice: CanIPhish are aware of a current limitation within Vanta for automated testing of the "Secure code security awareness training selected" control. Currently, Vanta do not support automated testing of this control by any Vanta Security Training Partners (CanIPhish included). CanIPhish have flagged this limitation with Vanta and the need to support automated testing of this control. We are cataloguing all customers who require this functionality and relaying it onto Vanta, so please let us know if this is functionality you would like.

Vanta's current recommendation is to deactivate the test for individual employees and have them submit evidence manually through the use of uploaded screenshots which show their certificate of completion.