<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Designing Security Training Programs

## Agent Script

### Commands

| Command | Description |
|---|---|
| `node agent.js design --audience all-employees --framework nist` | Generate training program blueprint for all employees |
| `node agent.js map-compliance --standard pci-dss` | Map training modules to PCI DSS 12.6 requirements |
| `node agent.js schedule --cadence quarterly --roles dev,hr,exec` | Build training calendar by role |
| `node agent.js gap-analysis --current-modules modules.json` | Identify coverage gaps against threat landscape |

### Examples

```bash
# Primary workflow
node agent.js design --audience all-employees --framework nist

# Secondary analysis
node agent.js map-compliance --standard pci-dss

# Generate deliverable
node agent.js schedule --cadence quarterly --roles dev,hr,exec

# Measure and report
node agent.js gap-analysis --current-modules modules.json
```

## External Tools

| Tool | Command | Purpose |
|---|---|---|
| KnowBe4 | `knowbe4 api --list-campaigns` | Phishing simulation and training |
| Proofpoint SAT | `proofpoint-sat --report` | Security awareness training |
| SCORM Cloud | `scorm-cloud --upload course.zip` | LMS content packaging |

## Compliance Frameworks

| Standard | Training Requirement |
|---|---|
| NIST SP 800-50 | Role-based security awareness and training program |
| ISO 27001 A.7.2.2 | Information security awareness, education, and training |
| PCI DSS 12.6 | Security awareness program for all personnel |
| HIPAA 164.308(a)(5) | Security awareness and training |
| SOX | IT general controls awareness |
