Skip to content

Use case · Onboarding

Security onboarding that runs itself

New joiners are a favourite target. They do not know yet what normal looks like, who sends what, or which requests are unusual. Yet security onboarding is usually a slide in the induction deck. With automatic enrollment, every new starter gets a proper path in their first weeks, without anyone remembering to assign it.

How it works

Six steps, none of which anyone has to remember

  1. 01

    The person appears in your directory

    Entra ID or Active Directory synchronization adds them overnight, in the right group and department.

  2. 02

    They are enrolled automatically

    Into the onboarding curriculum for that group. Anyone moving between groups moves between paths, and leavers are removed.

  3. 03

    They acknowledge the policies

    Acceptable use, information security, data protection — with a dated record for each.

  4. 04

    They work through a short path

    In their own language: modules in a fixed order, a deadline for each, a quiz with a pass mark, and a certificate at the end.

  5. 05

    Reminders run automatically

    Until it is done — and the end date extends by itself if completion is low.

  6. 06

    They join the regular program

    Including the next automated simulation, which is the first time anyone tests what they just learned.

A sample path

Four weeks, and the fourth is a test

  1. 01

    Week one

    Policy acknowledgement, recognizing phishing, password security.

  2. 02

    Week two

    Data protection basics, safe browsing and downloads, and a quiz.

  3. 03

    Week three

    Reporting suspicious email with the Report Phish button, and physical security.

  4. 04

    Week four

    The first simulation, included in the next automated cycle.

Different paths for different roles: finance joiners get payment-fraud and supplier-impersonation content, and IT administrators get privileged-access content.

What HR and security get

Three things, and no spreadsheet

  • A completion report for every intake
  • Named, dated records for audits
  • No manual assignment, no chasing, no spreadsheet
FAQ

Frequently asked questions

The questions we hear most often from security and IT leaders.

Something not covered here? Ask us directly

Curricula can be assigned by group as well as by department. A dedicated "new joiners" group, populated by your HR process or by a scheduled CSV export, works just as well — the automation is in the enrollment, not in where the grouping came from.

Yes. Upload it as MP4 or as a SCORM package and add it to the path. Completion is tracked like any other module, and skipping can be disabled for your own content too.

Related

Where to go next

  • Training & curricula

    Short modules assembled into learning paths with deadlines and certificates.

    Learn more

  • Content library

    Newsletters, tips, posters, screensavers and podcasts, in your own branding.

    Learn more

  • NIS2 training

    The staff and management-body duties, evidenced person by person.

    Learn more

Ready to get started?

Partner with Spirity Enterprise to implement the right security and IT solutions for your organization.