Training
Training is Keel’s security training program: framework-mapped courses you can preview, assign to your people, track to completion, and collect certificates for as evidence. It maps to framework requirements including SOC 2 CC1.4/CC2.2, ISO 27001 A.6.3, and HIPAA §164.308(a)(5). Find it under People in the sidebar.
The course catalog
Section titled “The course catalog”The catalog covers security, privacy, and compliance, and includes a course for developers on the OWASP Top 10:2025. Some lessons include code examples and video. Filter by topic (security, privacy, compliance) or by framework, and click a card to read every lesson and the quiz before you assign it. Each course lists its estimated time and the framework clauses it helps satisfy.
| Course | Topic | Time | Plan |
|---|---|---|---|
| Security Awareness Fundamentals | Security | 12 min | Every plan |
| Phishing & Social Engineering | Security | 10 min | Every plan |
| Data Handling & Privacy | Privacy | 11 min | Starter and above |
| HIPAA Basics | Compliance | 12 min | Starter and above |
| Acceptable Use & Insider Risk | Security | 10 min | Every plan |
| Secure Remote Work & BYOD | Security | 10 min | Starter and above |
| Incident Response Basics | Security | 9 min | Starter and above |
| Privacy & GDPR for Staff | Privacy | 11 min | Starter and above |
| OWASP Top 10:2025 for Developers | Security | 70 min | Starter and above |
| OWASP Top 10:2025 Essentials | Security | 15 min | Starter and above |
Training is on every plan. Free includes the courses marked Every plan, and Starter and above include the whole catalog. You can preview any course your plan includes.
Assign and track
Section titled “Assign and track”Owners and admins pick a course and an audience (everyone active, a department, a group, or specific people) with an optional due date and a recurrence of one-time or annual. Each assignment shows a status of Assigned, In progress, Overdue, or Completed, plus the learner’s quiz score. Summary tiles track people, total assignments, completion percentage, and how many are overdue. You can export the assignment list to CSV and send due reminders in one click.
Reminders also go out on their own. Every weekday, a learner whose assignment is due or overdue is emailed a fresh link, at most once a day, and an annual assignment is reissued a year after the learner completed it.
How a learner completes a course
Section titled “How a learner completes a course”Share the learner’s portal link (no login needed). The learner reads the lessons and takes the quiz; each course sets its own pass mark, which is 80% on every course today. On a pass, Keel mints a branded certificate, stores it as evidence in your workspace, and records the completion with the score, so a passing course becomes audit evidence automatically. The certificate is linked to your Security awareness training control when your workspace has it, and to every control in your workspace mapped to one of the course’s framework clauses. A clause with no mapped control in your workspace is skipped. A learner who doesn’t pass is recorded as not yet complete and can try again.
Next steps
Section titled “Next steps”- Evidence: where training certificates land as audit artifacts.
- Competence & people: the competence matrix that pairs with training.