Skip to main content

Training campaigns

Updated

Training campaigns are the scheduled assignments that keep users current on security awareness. Cypher supports annual training (typically for compliance), monthly training (for ongoing awareness), and remediation sessions (triggered automatically after an incident). Admins create and manage campaigns; users complete them through their dashboard.

How Cadence-Based Campaigns Work

Cypher uses the training cadence you set in Company Setup to drive campaign scheduling. Once the cadence is set, campaigns run automatically — you do not create a new campaign each month.

To review or change your cadence:

  1. Go to Setup.
  2. Check the training cadence field. Monthly is the recommended setting.
  3. If you need to change it, update the field and save.

On the first of each month, Cypher resets the monthly completion flag and begins the new cycle for all enrolled users.

Setting Up Company and Role Context

Campaigns draw their scenario content from THEO, which uses your company profile to generate relevant material. Before running your first campaign, make sure the company profile is complete.

  1. Open Cypher. If setup is not done, the wizard appears on first login.
  2. Enter your company name, industry, and size.
  3. Add your role list — for example Sales, Finance, Engineering, Support.
  4. Pick your training cadence.
  5. Save. THEO generates a threat profile and provisions initial scenarios.

Keeping the role list accurate matters. Users mapped to Finance get different scenarios than users mapped to Engineering.

Compliance Training Campaigns

Compliance bundles are assigned separately from regular cadence training. They cover specific regulatory frameworks and have explicit due dates.

  1. Go to Compliance Training.
  2. Click New Assignment.
  3. Select a bundle: HIPAA, PCI, state privacy, or a custom bundle.
  4. Choose the users or a role to assign it to.
  5. Set a due date.
  6. Save.

Reminders go out automatically until the assignment is complete. Admins can track completion status from the Compliance Training view.

New-Hire Onboarding Campaigns

New hires receive a dedicated onboarding campaign when an admin triggers their onboarding. See Enrolling Users for configuration steps.

Remediation Campaigns

Remediation sessions are assigned automatically when a user fails a phishing simulation or triggers an insider-threat, dark-web, or login-anomaly alert. These are short, targeted lessons — not full-length training sessions. Admins can also trigger them manually from a user's profile.

Remediation is a Complete tier feature. On Essentials, micro-training must be assigned manually.

Reviewing Campaign Status

  1. Open the Leaderboard or Reports section to see who has completed this month's training.
  2. For compliance assignments, go to Compliance Training and check each bundle's completion percentage.
  3. For micro-training status, go to Micro-Training → Stats.

FAQ

Can I create a one-off training campaign outside the regular cadence? For compliance curricula, yes — assign a bundle with a custom due date. For ad-hoc security topics, use the micro-training assignment flow from a user's profile.

How do I add new modules to the monthly campaign? The monthly session content is AI-generated from your company profile and framework library. You do not select individual modules for the cadence campaign. For specific content, use compliance bundles or micro-training.

Will users be notified when a new campaign starts? Yes. Cypher sends training reminders automatically each morning at 10:00 UTC for users with upcoming or overdue assignments.

Related