Training every employee — with evidence an auditor accepts

Contents

1. 1Executive summary
2. 2The challenge
3. 3Architecture
4. 4How it works
5. 5Capabilities in detail
6. 6Security and data handling
7. 7Where it fits
8. 8Deployment and system requirements
9. 9Technical specifications
10. 10Getting started

1Executive summary

CyberAware gives every employee short courses that work on a phone, assigned by department with due dates and reminders, and keeps signed certificates and a compliance report as evidence. E-mail goes only to domains you have proved you own.

2The challenge

Most incidents involve a person: a shared OTP, a reused password, a UPI collect request approved by mistake, a lost phone reported days late. Auditors expect organisations to train staff and keep evidence of it.

The TotalHeal approach. Courses of 5 to 10 minutes that work on a phone, assigned by department with due dates and reminders, with signed certificates and a compliance report. Training only in this release.

3Architecture

4How it works

1. VerifyProve each e-mail domain with a DNS TXT record.
2. ImportUpload employees with e-mail, name and department.
3. AssignCourses to everyone, departments or people, with due dates.
4. LearnEmployees open courses from an e-mail link, no account needed.
5. ReportSigned certificates and a compliance report for auditors.

5Capabilities in detail

• Six built-in coursesPasswords and two-step sign-in, UPI and payment safety, safe browsing, personal data under the DPDP Act, reporting incidents within the CERT-In window, and mobile safety — each 5 to 10 minutes with a quiz.
• English and HindiHindi versions of the passwords, UPI and mobile safety courses; more languages can be written in the course editor.
• Your own courses (Enterprise)A course editor with forms only — text, images, your own videos and quizzes — and duplicating built-in courses to adapt them.
• Assignments and remindersAssign courses to everyone, to departments or to named people with a due date; reminders before the due date and once when overdue.
• E-mail only to your verified domainsSign-in links and reminders go only to your employees at domains you have proved you own with a DNS record. Nothing is sent anywhere else.
• Learner portalEmployees open their courses from an e-mail link — no account or password — on a phone or computer, in light or dark.
• Signed certificatesA certificate of completion for every finished course, signed by TotalHeal CyberAware, with a public page to check that it is genuine.
• Reports for auditorsCompletion by department, course and person, a monthly trend and a downloadable compliance report listing the training evidence auditors commonly ask for. No official logos are used.

6Security and data handling

• Mail only to verified domainsLinks and reminders go only to domains you own.
• Certificates that verifyEach certificate is signed and has a public check page.
• Evidence, not certificationThe report is evidence of training, not a certification.

7Where it fits

8Deployment and system requirements

9Technical specifications

10Getting started

• A DNS TXT record for each e-mail domain of your employees
• A list of employees (CSV with e-mail, name and department)

Start a 30 days trial in the TotalHeal console with a Sttiz account. For a quote, an on-premises installation or the procurement dossier (compliance matrix, bill of materials, architecture and hardening, SLA, OEM authorisation letter), write to business@totalhealsecurity.com.