✅ Feature availability: While security awareness training is included with all plans, other trainings categories available to you depend on the frameworks you’ve purchased. Refer to Vanta Plans and Pricing for details.

Regular training helps employees stay informed about your organization’s security practices. In Vanta, security and privacy trainings (also known as security awareness trainings or SAT) are managed in the Personnel section, allowing you to assign different trainings to different employee groups. Once configured, Vanta automatically tracks completion, sends reminders, and manages recurring annual trainings.

Training categories and sources available

Training categories in Vanta are unlocked by purchasing the relevant frameworks. Even if you plan to use an integration or custom training as your training source, you must purchase the appropriate framework to make the corresponding training category available in Vanta. When you purchase a framework, you also receive access to Vanta’s built-in training videos for that category at no additional cost.

Training categories

Training categories available:

General security awareness (included with all plans)
AI risk
CCPA
GDPR
HIPAA
Insider threat
PCI DSS
Secure code
Social engineering

Learn more: Training Videos Access by Framework

Training sources

You can choose where to pull the training content from by selecting a training source. If you have multiple categories available in your account, you can choose a different source per category.

Training source	Description
Vanta	Vanta provides built-in security awareness training videos that you can use, if you’ve purchased the relevant frameworks.
Integrations	You can pull in trainings from any of Vanta's supported integrations. Training tasks should be assigned in both Vanta and the external system for proper tracking.
Custom	You can link to a training if you have a custom resource or use a training platform without a supported Vanta integration. Employees will be asked to upload proof of completion within their Vanta task.

Managing training tasks

Admins have the permissions to access the Personnel section in Vanta, which is where trainings are managed. Each group of people can have tasks assigned, including trainings. This allows you to assign the right trainings to the right users.

Adding trainings to groups

You can create a new group or use an existing one and configure which trainings are required for members of that group. Different groups can be assigned different trainings.

To add a training to a group:

In the Personnel section of your account, open the People page.
Click the Groups tab and open any group.
In the Tasks tab, click Trainings.
In the Manage trainings modal, choose which training categories to enable.
For each category, select one training source:
- Vanta: Select Vanta as the training source to use our built-in training videos. Click the ••• menu to edit the instructions and preview the video.
- Integrations: Click the Add training button and select the trainings to pull in from your connected integrations.
- Custom: Click the Add training button and select Custom training from the list. Enter the URL and instructions.
Repeat this process for each training category you’re enabling. You can use a different training source for each training category, but only one source per category.
Save your changes.

Adding trainings to task sets

In addition to adding trainings from within a group, you can also add trainings within a task set. When you update the trainings in a task set, those changes apply to all groups using that task set. This can be helpful if you want to update training requirements across multiple groups at once.

Selecting trainings from integrations

When using integrations as a training source, you can select multiple trainings across one or more connected integrations. When using integrations as a training source, you can select multiple campaigns or assignments across one or more connected integrations to be tracked within Vanta.

To select trainings from integrations:

In the Manage trainings modal, choose Integrations, and click the Add training button.
Select an integration from the list, then use the drop-down menu to select the campaigns or assignments to pull in.
Click Update when you’re done with that integration.
Repeat steps 1–3 for each integration you’re pulling from.

Completing training tasks

Admins can preview a task set to see what the task list looks like for each group. All users can see the training tasks they need to complete within their Vanta account. In their navigation menu, they’ll go to My security tasks—or you can link people here: https://app.vanta.com/onboarding

Training recurrence

After the user completes the training, we log their completion in Vanta with the most recent completion date, which is visible when you click on an individual from the People page.
- For Vanta trainings, they must watch the full video and click Submit in Vanta.
- For Integrations trainings, they have to watch in their 3rd party tool, but don't need to click submit in Vanta.
- For Custom trainings, they must upload evidence and click Submit in Vanta.
By default, this is an annually recurring task for employees. The training anniversary date is based on the employee's last completion date.
If you need certain users to revisit a training before the annual due date, they can do so from the My security tasks page in their account.

Tracking progress

On the People page, you can filter by Task status, as well as customize the columns to display in the table, making it easy to identify exactly who has pending training requirements across the entire organization.
You can see an individual user's progress by opening the People page, selecting the person, and viewing their tasks.

Sending reminders

Manage personnel reminders to automatically notify employees with upcoming incomplete tasks to notify employees who have not completed their training tasks, or send one-off reminders.

FAQ

Why are some trainings missing from security tasks and reminders?

A training must be assigned to a group in Vanta in order to appear in security tasks.
Vanta and Custom trainings appear directly in security tasks and are completed within Vanta.
Integrations trainings will appear in security tasks for visibility. However, employees must complete those trainings in the third-party platform. Vanta tracks completion via integration data.
If an employee is assigned Vanta or Custom trainings AND Integrations trainings, Vanta will send reminder emails that include any incomplete third-party trainings.
If an employee is assigned ONLY Integrations trainings, Vanta will not send reminder emails. In that case, reminders and notifications are handled solely by the third-party provider.

Can I manually mark tasks as complete or incomplete?

Admins can manually mark custom tasks as complete or upload custom task evidence on behalf of a user.
The option to upload a document will be visible when you click on an individual from the People page. Please note, this only applies to custom trainings, not integrations.
It is not possible to uncheck a task that has already been marked as completed.

Can I use both Vanta trainings and third-party trainings?

You can use Vanta trainings in addition to using trainings from a third-party—however, you can only choose one training source per category.
For example, if I have two training categories:
- For each one, you can choose Vanta OR Integrations as the training source.
- One training category can use Vanta and the other can use Integrations.
Our team is working on adding the ability to allow you to choose multiple training sources per category.

Managing Personnel Training Tasks