Example, read only. A sample company whose own team runs its CMMC program here, reviewed by a credentialed officer and kept current.
Level 2 · Awareness and training
The awareness course
Everyone on the People roster takes the core module (AT.L2-3.2.1 [c,d]) and the insider threat module (AT.L2-3.2.3 [b]); the people with assigned security duties also take the role addendum (AT.L2-3.2.2 [c]). Each person gets a standing link, nothing is recorded until the check is passed, and the completion writes the training record rows the requirement cards credit, with the course version and the hash of what they read.
Course version 2026.09.1, materials sha256 2ccbcb34b35a3899. 8 sources, each with a URL and the day it was read.
Who is missing: nobody
Everyone on the roster (11) completed the current course inside the year. 3 of them hold security duties and also passed the role addendum.
The roster
Pass mark 80 percent on every module's check
Elena R. Marsh
Chief Executive Officer, Affirming Official
Duties: Affirming Official
Controlled information in your hands; Recognizing and reporting an insider threat; Your assigned security duties
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Marcus Hale
Director of Engineering, incident response lead
Duties: incident response lead
Controlled information in your hands; Recognizing and reporting an insider threat; Your assigned security duties
Completed this year, 91 percent, version 2026.09.1
Next due a year after completion
Ava Chen
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Ben Ortiz
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 88 percent, version 2026.09.1
Next due a year after completion
Carla Reyes
Program engineer, system administrator
Duties: account and system administration
Controlled information in your hands; Recognizing and reporting an insider threat; Your assigned security duties
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
David Kim
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Emma Novak
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 88 percent, version 2026.09.1
Next due a year after completion
Farid Haddad
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Grace Liu
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Henry Walsh
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 88 percent, version 2026.09.1
Next due a year after completion
Isabel Moreno
Program engineer
Controlled information in your hands; Recognizing and reporting an insider threat
Completed this year, 100 percent, version 2026.09.1
Next due a year after completion
Send the course
In your account you tick the people, give each an email, and send. A person with an open link gets the same link again. The audience comes from the People roster and the duties it records, never a blanket send.
What the course covers
- Controlled information in your hands (15 minutes): AT.L2-3.2.1 [c,d], recorded as awareness.
- Recognizing and reporting an insider threat (5 minutes): AT.L2-3.2.3 [b], recorded as insider threat.
- Your assigned security duties (5 minutes): AT.L2-3.2.2 [c], recorded as role based.
The completion rows live in the training record register; the awareness cards credit the letters from those rows, the insider threat and role based letters only through the training type.
Level 2 includes it
Security awareness training for your whole team, with the record kept.
Start free for 30 days, no credit card, or book a free advisory call if you would rather talk it through first.