Important Update Regarding Mandatory Information Security Awareness Training

Starting in September, the university will disable NetID and university system access of employees and designated campus colleagues (DCCs) who are overdue to complete the annual Information Security Awareness Training recertification. This mandatory training educates employees about their responsibilities to keep our institution safe from cybersecurity threats.

EDGE Learning will send email notifications 15 days, 7 days and 1 day before the assigned training due date. 

Employees and DCCs who have been overdue to complete the training for several months will be required to do so no later than Sept. 9.

Employees and DCCs who are scheduled to complete the training between June and October will be required to do so no later than Oct. 6.

Employees and DCCs who are yet due to complete training will receive EDGE Learning email notifications in advance of their annual recertification due date.

What happens if the annual training is not completed by the due date
If employees and DCCs do not complete the 5-minute mandatory recertification by the assigned due date in EDGE Learning, the university will disable their NetID and access to university systems (e.g., Outlook, Zoom, Teams, Box and UAccess). 

To regain access, employees and DCCs will need to complete the initial 34-minute Information Security Awareness training in EDGE Learning, instead of the 5-minute recertification training. It may take up to two hours for access to be fully restored after the required training is completed in EDGE Learning. 

The initial 34-minute training is required within the first month of employment or engagement with the university, and the 5-minute recertification training is required on an annual basis.

The compliance measure was already in effect for the initial training and is now expanded to the annual recertification training as part of our ongoing efforts to protect university information resources.

For questions and additional information
General information security awareness training inquiries: ISO-Compliance@arizona.edu
Inquiries about training exemptions or extensions: ISO Policy Exception Request page
Information Security Awareness Training FAQs
Technical assistance with EDGE Learning: 24/7 Support Center
Questions about EDGE Learning: edge-learning@arizona.edu