<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Building Security Onboarding Programs

## Agent Script

### Commands

| Command | Description |
|---|---|
| `node agent.js orientation --day 1 --role engineer` | Generate day-one security orientation for engineers |
| `node agent.js plan-90day --role finance --access-level standard` | Build 90-day progressive security training plan |
| `node agent.js credential-setup --methods sso,mfa,password-manager` | Create credential management onboarding guide |
| `node agent.js verify --checkpoints day1,day30,day60,day90 --role engineer` | Define onboarding verification checkpoints |

### Examples

```bash
# Generate day-one security orientation for engineers
node agent.js orientation --day 1 --role engineer

# Build 90-day progressive security training plan
node agent.js plan-90day --role finance --access-level standard

# Create credential management onboarding guide
node agent.js credential-setup --methods sso,mfa,password-manager

# Define onboarding verification checkpoints
node agent.js verify --checkpoints day1,day30,day60,day90 --role engineer
```

## External Tools

| Tool | Command | Purpose |
|---|---|---|
| Okta | `okta --user-lifecycle --status onboarding` | Identity and access management |
| Jamf | `jamf --enroll-status --new-devices` | macOS device management |
| BambooHR | `bamboohr --onboarding-tasks --department engineering` | HRIS onboarding integration |

## Compliance Frameworks

| Standard | Training Requirement |
|---|---|
| NIST SP 800-50 | Building awareness and training programs |
| ISO 27001 A.7.2.2 | Information security awareness and training |
| CIS Control 14 | Security awareness and skills training |
| SANS Security Awareness | New hire security awareness maturity model |
