CAIQ v4
Control HRS-01
Extractive Review Standard
How to answer 'How frequently is security awareness and phishing training conducted?' on a CAIQ
Reviewer Guidance & Pitfalls
State that training is mandatory during onboarding (within 30 days of hire) and conducted annually thereafter, supplemented by simulated phishing campaigns.
Example Answer Passing Enterprise Audit
Compliant Response Template
All employees complete security awareness training upon hire and annually thereafter, supplemented by quarterly simulated phishing assessments (SOC 2, CC1.4).
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
Zero spam. 100% confidential. No credit card required.