More in Cybersecurity: Cybersecurity Awareness Fundamentals · Data Privacy & GDPR/CCPA Basics · Remote Work Security · Social Engineering & Business Email Compromise (BEC) & Deepfake Defense · Incident Reporting Protocols · Data Backup Hygiene & Ransomware Readiness · Lifecycle Patch & Vulnerability Management
This compliance-focused awareness course is for SMB employees who use, or may be tempted to use, public generative-AI tools in daily work. It translates an urgent AI-related risk into documented, SCORM-ready annual training that helps organizations protect confidential data, prevent privacy violations, and demonstrate responsible employee training for compliance and vendor-due-diligence purposes.
This module introduces generative-AI use as a business-risk issue, not just a productivity topic. It explains why public LLMs create a new exposure pathway when employees enter customer, employee, financial, legal, or proprietary company information into tools outside the organization’s controlled environment.
This module defines public generative-AI tools in plain language and distinguishes them from approved internal tools or enterprise environments. It helps learners understand that where a prompt is entered matters just as much as what is entered.
This module provides the core governance rules employees need most: what information must never be entered into a public LLM. It turns broad policy language into concrete data categories and examples employees can recognize in their workflows.
This module teaches employees how to use AI responsibly when use is permitted. It focuses on safe prompting, approved business uses, redaction, anonymization, and staying within policy-defined guardrails.
This module explains the harms that can occur when sensitive data is entered into public LLMs, including privacy violations, confidentiality loss, contractual risk, and exposure of intellectual property. It explains the business consequences behind policy rules.
This module applies the rules to common employee scenarios in HR, marketing, sales, customer support, finance, operations, and administrative work. It shows how innocent-seeming prompts can cross policy boundaries when they include actual names, account details, contracts, health information, or internal strategic content.
This module teaches employees what to do if they accidentally paste sensitive data into a public LLM or suspect someone else has done so. It emphasizes immediate escalation, accurate reporting, and avoiding informal cleanup attempts that could make matters worse.
This final module reinforces the course’s core governance rules and ties them to annual compliance documentation. It supports LMS-based completion tracking and provides a repeatable training record aligned with a SCORM-ready compliance catalog.
This compliance-focused awareness course is for SMB employees who use, or may be tempted to use, public generative-AI tools in daily work.
About 30 minutes, delivered across 8 modules with knowledge checks.
What generative-AI tools and public LLMs are, and why they create distinct data-governance and privacy risks when employees paste work information into them; What types of company information and customer data are prohibited from public LLMs, including proprietary business data, confidential records, credentials, regulated information, and PII; How acceptable-use policies define permitted and prohibited AI use cases; How to identify safe versus unsafe prompting behaviors when using AI at work; How to escalate questions, report accidental disclosures, and follow internal governance procedures; Why this course matters as part of a recurring compliance program for SMBs handling customer, employee, or proprietary business information.
Yes. The course issues a certificate on completion. It ships SCORM 1.2 or 2004 with audio narration, captions, transcript, and runs on the Provisant learning platform.
$5 per user per course per year. Annual billing saves 20%. Any course in the catalog can be added to a plan.