Training & Awareness

SL-06

Role-based bilingual curriculum, phishing simulation and certification. Rule 6 requires technical and organisational measures — training is the organisational half, and completion records are how it becomes evidence rather than intent.

DischargesS.8(4)R.6

Phishing simulation Course catalog

18 mandatory enrolments are overdue

Two directorates are below 60% on the security deep-dive. Organisational measures under Rule 6(1)(h) cannot be evidenced for a directorate whose staff have not completed the mandatory curriculum.

Mandatory

6

Programme completion

67%

SLA target is 90%

Learners enrolled

10,054

6,735 completions

of 140 tracked enrolments

Certificates issued

In the tracked set

Completion by department

Outstanding enrolments first. Completion is reported per directorate because that is where accountability sits.

Enrolment status

Across all courses.

completed47
in progress37
not started29
overdue18
failed9

Completion by course

The deep-dive modules lag because they are long. That is expected, but it is also where the security obligations sit.

M1DPDP Act Essentials3,762 / 4,820

M2DPO Foundation Programme26 / 34

M3Senior Leadership Awareness31 / 42

M4IT & Security Team Deep-Dive178 / 310

M5Consent & Notice Handling1,488 / 1,840

M6Breach Response Drill44 / 68

M7Annual Refresher1,206 / 2,940

Phishing simulation

Simulations measure behaviour rather than knowledge, which is the only thing that predicts what happens on a real link.

Q3 simulation — cloned departmental loginRunning

“Your session expired — sign in again to continue”

Delivered: 4,640
Opened: 2,104
Clicked: 418
Reported: 940

940 people reported the message — more than twice the number who clicked it. Reporting rate is the metric worth optimising, not click rate.

Directorates needing attention

Readiness score correlates closely with training completion — the causation runs both ways.

Health & Nutrition Services

58%

Education & Scholarships

61%

Procurement & Vendor Management

55%

Related

Course catalogSeven modules from DPDP Essentials through the DPO foundation programme and the breach drill.EnrolmentsWho is assigned what, who has completed it, and who is past their due date.Phishing simulationTwo campaigns a year, with follow-up training targeted at the people who clicked.EffectivenessPre- and post-test scores by department — whether the training actually changed anything.