<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: building-security-onboarding-programs
description: >-
  Build security onboarding programs for new hires covering acceptable use
  policies, credential management, device security, reporting procedures,
  and role-specific security requirements within the first 90 days.
domain: cybersecurity
subdomain: security-awareness
tags:
  - onboarding
  - new-hire
  - acceptable-use
  - credential-management
  - device-security
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Building Security Onboarding Programs

## Overview

Security onboarding sets the foundation for employee security behavior from
day one. This skill covers first-day security orientation design, 30-60-90 day
progressive training plans, role-specific security requirement mapping, credential
and device setup guidance, and verification checkpoints that confirm competency
before granting elevated access.

## Prerequisites

| Requirement | Install |
|---|---|
| HRIS integration | Workday, BambooHR, or SAP SuccessFactors |
| IAM platform | Okta, Azure AD, or JumpCloud |
| MDM solution | Jamf, Intune, or Kandji |

## Commands

| Command | Description |
|---|---|
| `node agent.js orientation --day 1 --role engineer` | Generate day-one security orientation for engineers |
| `node agent.js plan-90day --role finance --access-level standard` | Build 90-day progressive security training plan |
| `node agent.js credential-setup --methods sso,mfa,password-manager` | Create credential management onboarding guide |
| `node agent.js verify --checkpoints day1,day30,day60,day90 --role engineer` | Define onboarding verification checkpoints |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js orientation --day 1 --role engineer
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js plan-90day --role finance --access-level standard
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js credential-setup --methods sso,mfa,password-manager
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js verify --checkpoints day1,day30,day60,day90 --role engineer
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
