A curriculum is a collection of Securing the Human (STH) modules that is assigned to Learners. NOTE: You must create a curriculum rather than assign individual modules in order for the completion to be tracked on reports and Learners to receive notifications and completion certificates. Curriculum Benefits Learners receive system notifications for the entire curriculum, instead of being inundated with emails for each module assigned. Learners receive an overall completion certificate for the entire curriculum. Completion reports display when Learners have completed their entire assigned curriculum, so you know when they have truly satisfied their cybersecurity awareness training assignment. Modules can be grouped and reused to create curricula for specific groups. For example, you can create and assign a curriculum directly to your IT Organization or PCI DSS members without requiring all employees to watch modules that are not relevant for them. IMPORTANT NOTES HELPFUL INFORMATION BEST PRACTICES Do NOT remove or add audiences to the Registration list on the curriculum s properties page. Changing this will prevent the curriculum from being assignable. If you need to delete a module from the curriculum, press Delete. Pressing Discard will remove the entire curriculum. To see a list of Securing the Human modules by product line visit the STH Cyber Security Awareness Training page. When adding modules to your curriculum, you can only add one module at a time. You will need to repeat the subscription action in order to add additional modules. There are many more fields available in the Curriculum Properties. These instructions cover the required fields. To only show the required fields, you can click Show Required Properties on the General Properties form. To edit your curriculum once in production, you will need to press Send to Stage. Select the same subscription honor settings for each module you add to the curriculum. Your selections cannot be referenced once made. Keep your curriculum in Stage until you are ready to assign to users. This will allow you to review and edit your curriculum prior to assignment. SANS Institute. Not for redistribution without written permission. 1
Instructions STEP 1: Create Curriculum 1. Open the Learning Activities page under Training Management 2. Press and select from the dropdown menu 3. Complete the required General Properties Field Description Take Note Name Enter a name for the course, such as Cybersecurity Core Training The name you enter here will be the name displayed on your learners dashboards, in their notifications, and on their certificates. Primary Domain Pre-populated with your account name Activity Type Pre-populated with Curriculum 4. Add modules: Recommended Core Curriculum modules and instructions to preview modules are located at the end of this document. a. Press on the sidebar b. Select from the dropdown menu; this will bring up a list of available modules c. Select a module you would like to include in the curriculum, then press d. Select any Subscription Link Properties that apply, then press Selecting none of these assigns the module, even if the Learner has previously viewed it. Item Honor successful completion even when users are not registered to the subscribing activity in this activity structure Honor previous successful completion What is Means If a learner has completed a module, it will be marked complete in all curricula assigned. Latest completion: Honors the user s latest completion. Honor the above completions only when users register to at least one activity within the subscribing activity structure Latest completion since: Allows you to select a date from the calendar to set the timeframe from which to honor completions from. If your learner has completed all of the activities in your curriculum, they will be marked as complete. 5. Repeat for each module you d like to include in the curriculum NOTE: To ensure modules appear in the order you wish Learners to view them, subscribe to the modules in the order you wish them to be listed in the curriculum. SANS Institute. Not for redistribution without written permission. 2
Step 2: Configure the curriculum s metadata 1. Press at the bottom of the window Because the SANS ACLP is an enterprise system, there are many configuration options available that do not apply to administering Securing the Human training. Only configure the following: 2. Select User Defined under Metadata a. Select the Product Line this curriculum should be associated with. Your selection will place your curriculum under the following heading on the Learner s Dashboard: Item EndUser CIPv5 Developer Engineer Healthcare Customer Supplied Other Admin Training [Left Blank] Learner Dashboard Heading Cybersecurity Awareness Training CIPv5 Developer Security Awareness Engineer Security Awareness Healthcare Security Awareness [COMPANY NAME] Content Other Training Admin Training Other Training b. Press STEP 3: Send curriculum to production Before this step, your curriculum is in Stage. This means that your curriculum is essentially in the draft phase of development. Validating and moving the curriculum to Production finalizes the curriculum and makes it available to assign to learners. 1. Press If all the required data fields are populated, you will see: 2. Press 3. Your curriculum is now available to assign to its target group. NOTE: You cannot edit a curriculum once it s been assigned to a target group. SANS Institute. Not for redistribution without written permission. 3
STH Core Curriculum A core curriculum is the set of common modules focused on making sure that all employees meet the same objectives and are compliant with overall security awareness standards. The recommended Securing the Human core curriculum portrays realistic, memorable scenarios that are transferrable to everyday tasks. By completing the ten core training modules, Learners build their shield to protect themselves, their families, and their organizations. The recommended modules to include in your Core Curriculum are: STH Recommended Core Curriculum You are the Shield Mobile Device Security Social Engineering Passwords Email & Messaging Hacked Browsing Data Security and Data Destruction Social Networks Conclusion You can create a core curriculum with just these modules, or include additional modules that all members of your organization need to view in order to comply with your cybersecurity awareness standards. Previewing Modules Previewing multiple modules To preview the modules you've purchased, we recommend the following: 1. Create an Organization called Preview 2. Create a Test User and add it to the Preview Organization 3. Assign the full list of modules to the Preview Organization as Recommended Training 4. Log in as the Test User to review the modules as needed Previewing individual modules NOTE: You must watch the module in its entirety, or you may cause a duplicate registration. 1. Open Learning Activities under Training Management 2. Click on the name of the module you wish to preview 3. Select the View Activity link next to URL to Activity A new browser window may open 4. Press 5. Select your preferred language in the new browser window that appears 6. The module will begin playing SANS Institute. Not for redistribution without written permission. 4
Editing a Curriculum NOTE: You cannot edit a curriculum once it s been assigned to a target group. 1. Open the Learning Activities page 2. Press the pencil next to the curriculum's name 3. Press the Send to Stage button at the bottom of the screen 4. You can now add or delete modules or edit the curriculum's properties 5. To reorder new modules, drag the modules in the preferred order, and press Save 6. Once changes are complete, move the curriculum back to Production SANS Institute. Not for redistribution without written permission. 5