Security Awareness Training Platform

Awareness Training

GDPR ISO27001 NIS2 AI Act CIS18 NIST-CSF

Serious training. Seriously simple.

Become compliant with the GDPR, NIS2, and more.
Certificates, documentation, and compliance.
60+ high-quality micro-lessons.

RGPD.COM

Awareness Training

Digital Compliance

GDPR NIS2 AI Act

Resources

Guides Templates Quizzes

Courses

GDPR IT Security NIS2

Awareness Training 🇪🇺 EU Hosted

Short videos

The numbers behind awareness training

Training requirements

Compliance includes your people

The safest systems still depend on the people who use the systems every day.

Read Article 39

Governance

2. Member States shall ensure that the members of the management bodies of essential and important entities are required to follow training, and shall encourage essential and important entities to offer similar training to their employees on a regular basis, …

AI literacy

1. Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, …

Awareness Training

Compliance Introduction Training

Short introductions to GDPR, NIS2 and information security. Done before lunch, remembered long after.

3 lessons, 4 minutes

GDPR Introduction

What the GDPR is, why it exists and who must follow it.

See the course

3 lessons, 6 minutes

NIS2 Introduction

Who NIS2 covers, what it asks for and what management answers for.

See the course

3 lessons, 6 minutes

Information Security

What information security is and what it means in everyday work.

See the course

The platform

The platform to train your organisation

You choose what, who and when. The platform sends each training and its reminders, and records every completion for your certificate.

IT Security

Security Frameworks Training

Train your team on industry-standard security frameworks including ISO 27001, CIS18, and NIST-CSF to strengthen your organisation's security posture.
Practical awareness training that helps employees understand and apply security controls in their daily work.

Free templates

Templates for your compliance documentation

Start from a ready-made template instead of a blank page, and make it your own.

ABCDE

1Processing ActivityProcessing Activity (sub)DescriptionController/ProcessorPurpose

2CustomersCustomer support (ticketing)Handling customer inquiries and support requests through the company’s ticketing system. Communication with customers to resolve issues and provide assistance.ControllerTo handle and resolve customer inquiries and support requests.

3CustomersCustomer project tasksManaging and executing customer projects, including communication, documentation, and delivery of services as agreed with the customer.ControllerTo manage, deliver, and document customer projects and services.

4AdministrationBoard of directors workThe professional board processes necessary information from the company’s customers and employees in connection with strategic decisions and governance tasks.ControllerTo support strategic decisions and ensure proper company management.

5CommunicationPotential customers (leads)Communication with potential customers for sales purposes, including responding to inquiries and maintaining contact to explore possible cooperation.ControllerTo create and maintain contact with potential customers for sales purposes.

6CommunicationCustomersOngoing contact and communication with existing customers regarding services, deliveries, updates, and contractual matters.ControllerTo manage customer relationships and deliver agreed services.

7FinanceDaily bookkeeping and accountingDaily bookkeeping and preparation of financial statements.Bookkeeping and payments are performed internally. The accountant prepares the annual report.ControllerTo maintain financial records and comply with accounting and tax obligations.

8FinancePayroll processingPayment of salaries to employees and reporting to the payroll system. Payroll data is processed for compliance with legal requirements.ControllerTo pay salaries and fulfill legal and contractual obligations related to employment.

9FinancePayments and invoicingIssuing invoices for services provided and processing customer payments. Handling payment records and related financial information.ControllerTo process payments and issue invoices for products or services provided.

10HRRecruitment (job applications – solicited and unsolicited)Receiving and processing job applications sent to the company by email. Preparing employment contracts for selected candidates. Unsuccessful applications are deleted.ControllerTo assess candidates and manage the recruitment and hiring process.

11HREmployee development reviews (performance appraisals)Managers hold employee development and performance meetings and record agreed follow-up points, which are communicated by email to the employee.ControllerTo evaluate performance and plan employee development.

12HREmployment process (hiring)Preparation of employment contracts. A standard employment contract is customized for each new employee.ControllerTo prepare and manage employment contracts and onboarding procedures.

ABCDEFGH

1Risk IDAsset/ProcessData CategoryThreatVulnerabilityImpactLikelihoodRisk Level

2 R001Customer DatabasePersonal Data (non-sensitive)Unauthorized AccessWeak access controlsHighMedium 6

3 R002Marketing Email ListPersonal Data (non-sensitive)Data BreachUnencrypted data transmissionMediumLow 2

4 R003HR RecordsPersonal Data (sensitive)Data LossInadequate backup proceduresHighMedium 6

5 R004Website AnalyticsNot Personal Data (aggregated)Non-compliance (cookie consent)Missing cookie bannerLowHigh 3

6 R005Third-party Data ProcessorPersonal Data (non-sensitive)Vendor Non-complianceLack of due diligenceHighMedium 6

7 R006Employee DevicesPersonal Data (non-sensitive)Malware InfectionOutdated antivirus softwareMediumMedium 4

8 R007Cloud StoragePersonal Data (non-sensitive)MisconfigurationPublicly accessible bucketHighLow 3

9 R008Data Subject Access Request (DSAR) ProcessPersonal Data (non-sensitive)Incomplete ResponseManual data retrievalMediumMedium 4

Controller

We are data controllers as we process the personal data of our customers and partners. You will find our contact information below.

[company name]

[Address]

Business identification number: [Business ID number]

If you have questions about processing your data, you can contact us via [email address].

Processing Activities

Website visitors

When you visit our website, we use cookies for the website to function, which you can read more about in our cookie policy.

All templates

Compliance Hub

The paperwork, done properly

The documents you shouldn't have to ask for, ready for your records before you even sign up.

EU by design

The company: EU owned
Data processors: EU owned
Your data: EU storage

Security Awareness

IT Security Training

Email Phishing Lessons

Password Security Lessons

Social Engineering Lessons

View courses

GDPR Awareness

Awareness Training

GDPR Introduction 3 Lessons

NIS2 Introduction 3 Lessons

Information Security 3 Lessons

View all courses

🇪🇺 EU Hosted