Govern · Compliance and management

Training

Security courses for all your staff, with the register of completions ready for the audit.

What it does

Train your staff, and be able to prove it

Every standard requires staff to be trained in information security, and at the audit it asks you to prove it. Dottor Box training takes care of both.

The courses are inside the platform and employees access them with their company address, without anyone having to create accounts one by one. The register of completions, meaning who did what, when and with what result, can be downloaded as a file.

It is the evidence that is normally pieced together by hand the week before the auditor's visit. Here it updates itself every time an employee completes a quiz, and NIS2 explicitly requires it of management bodies too.

No second password: the course platform opens inside Dottor Box with automatic login.

The benefits

What you get

Built-in courses

The e-learning is inside the platform, with no second login to remember.

Login with the company email

Employees sign in by themselves with an address on the company domain: no invitations one by one.

People × quiz register

A matrix with completion dates and scores, exportable to CSV.

Evidence for the audit

The register counts as evidence of training for GDPR, NIS2 and ISO/IEC 27001.

How it works

Training for all your staff, without managing accounts

Two mechanisms make it easy to extend the courses to the whole company.

  1. You declare the company domains

    You specify your company's email domains. Anyone who signs in with an address on that domain is linked automatically, with training-only access.

  2. Employees sign in

    Users enabled for training only see a reduced interface: just the courses, nothing else in the platform.

  3. You manage the exceptions

    Individual addresses can be excluded and later readmitted, for example external collaborators or service mailboxes.

Licences

A set number of places, with no surprises

Every Dottor Box has a cap on training places. Anyone already enrolled always gets in. A new user gets in if there are places left; otherwise they see a message directing them to the reseller to extend the licence.

A detail we get right: if the course platform does not respond, the licence check lets people through. A technical fault should not block your employees' training.

The training register is the matrix the auditor asks for: people in the rows, quizzes in the columns, date and score in every cell.

The training register

The training record to show at the audit

The Training Register is reserved for your company's administrators. It shows at a glance who has completed what, and who has fallen behind.

The Compliance module draws on it as evidence for the clauses that concern training, with a count of the courses enabled and of enrolments. You do not have to upload it by hand.

  • Rows: the people in the company
  • Columns: the course quizzes
  • Cells: done or not done, with completion date and score
  • Export to CSV, which opens in any spreadsheet
  • Access reserved for the customer's administrators
Frequently asked questions

Questions about training

Do I have to create an account for every employee?

No. You declare the company email domains, and anyone who signs in with an address on that domain is linked automatically, with training-only access.

Can employees see the company's security data?

No. Users enabled for training only have a reduced interface and see nothing but the courses.

Who can download the training register?

Only your company's administrators. The register is exported to CSV with the completion dates and scores of each person.

Compliance

Which standards it supports

Staff training and its recording are required by all the main security and data protection standards.

Do you know what someone looking for a target can see of your company?

In a demo on your real systems we show you what is exposed, how much it matters and where to start. Then, if you need it, a tailored proposal.