<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: designing-security-training-programs
description: >-
  Design comprehensive security awareness training programs with learning
  objectives, audience segmentation, content calendars, delivery strategies, and
  compliance mapping to NIST SP 800-50, ISO 27001 A.7.2.2, and PCI DSS 12.6.
domain: cybersecurity
subdomain: security-awareness
tags:
  - training-design
  - curriculum
  - learning-objectives
  - compliance
  - lms
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Designing Security Training Programs

## Overview

Effective security training programs start with threat-informed learning objectives,
segment audiences by role and risk, map content to compliance frameworks, and measure
behavior change over time. This skill covers program architecture from needs assessment
through delivery and optimization.

## Prerequisites

| Requirement | Install |
|---|---|
| LMS platform | KnowBe4, Proofpoint SAT, or custom LMS |
| Content authoring | SCORM/xAPI compatible tooling |
| Compliance matrix | NIST 800-50, ISO 27001, PCI DSS 12.6 |

## Commands

| Command | Description |
|---|---|
| `node agent.js design --audience all-employees --framework nist` | Generate training program blueprint for all employees |
| `node agent.js map-compliance --standard pci-dss` | Map training modules to PCI DSS 12.6 requirements |
| `node agent.js schedule --cadence quarterly --roles dev,hr,exec` | Build training calendar by role |
| `node agent.js gap-analysis --current-modules modules.json` | Identify coverage gaps against threat landscape |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js design --audience all-employees --framework nist
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js map-compliance --standard pci-dss
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js schedule --cadence quarterly --roles dev,hr,exec
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js gap-analysis --current-modules modules.json
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
