Skip to main content

All-Employee Information Security Awareness

student on computer

Mandatory All-Employee Security Awareness Program

Per ISO-500 Information Security Awareness Training Policy, all University of Arizona employees, student workers, and Designated Campus Colleagues (DCCs) who have access to university information resources are required to complete security awareness training annually. 

Class offerings in EDGE Learning:

  • All-Employee Security Awareness Training (Course ID 1332):  Training must be completed within 30 days of hire.
  • All-Employee Security Awareness Refresher Training (Course ID 1649): Training must be completed within 30 days of the anniversary of the previous instance of such training.

PLEASE NOTE THAT YOUR NETID WILL BE DISABLED AND YOU WILL LOSE ACCESS TO ALL UNIVERSITY SYSTEMS (INCLUDING EMAIL) EXCEPT EDGE LEARNING IF YOU DO NOT COMPLETE SECURITY AWARENESS TRAINING BEFORE YOUR DUE DATE. It can take several hours for your access to return after you complete the training. 

Security Awareness Training Links

Frequently Asked Questions (FAQs)

The ISO has published the Information Security Training Enforcement Procedure, which summarizes:

  • Training requirements
  • The enforcement process
  • The exception request process
  • Instructions for accessing security awareness completion status

The University of Arizona fosters an information security culture and is committed to protecting the confidentiality, integrity and availability of its information systems and resources. The Information Security Awareness Training policy is a state of Arizona requirement and educates members of the University community about their responsibilities to keep our institution safe from ever-evolving cybersecurity threats.

According to University policy, all faculty, staff, student workers, graduate assistants and associates, and designated campus colleagues (DCCs) with access to University Information Resources are required to complete Information Security Awareness Training within the first month of employment or engagement with the University and renew it annually in EDGE Learning.

Yes, most DCCs are required to complete Information Security Awareness Training and receive notifications from HR during their onboarding process and from EDGE Learning. There are a few categories of DCCs without NetIDs or University email accounts (e.g., Intermittent/Occasional Volunteers and Building Occupants) that are not required to complete the training.

The online training is available in EDGE Learning. You will receive a notification from EDGE Learning sent to your University email address prior to your training due date as part of your onboarding process and for annual renewal. Notifications are sent 15 days, 7 days, and 1 day prior to the due date.

Go to arizona.sabacloud.com and you will then be prompted to log in with your UA Net ID. For more detailed instructions on logging into EDGE Learning, please review the Log into EDGE section on the EDGE Learning website. 

For help accessing EDGE Learning or any other technical support related questions contact the 24/7 IT Support Center at 520-626-8324.

For more information about EDGE Learning, go to the FAQ page.

The initial training takes about 34 minutes to complete and the annual refresher training takes five minutes to complete. 

You can verify if you have successfully completed the initial or annual renewal by logging in to your EDGE Learning Plan. You will find this information in the Learning and Certifications section. For more information, go to the EDGE Learning View Completed Learning page. 

New hires must complete Information Security Awareness Training within the first month of employment or engagement with the University and renew it annually in EDGE Learning. EDGE Learning sends the first notification 15 days before initial or annual renewal training certification expires. EDGE Learning sends additional reminders at 7 days and 1 day prior to the due date.

For non-students (faculty, staff, and DCCs whose primary affiliation is not Student) who have not successfully completed their Information Security Awareness training in EDGE Learning, access will be blocked to any University system that is accessed via UA WebAuth login. 

Student employees will lose access to Employee/Manager Self-Service areas of UAccess Administrative Systems. 

This compliance measure will be fully in place by October 7, 2025. 

Completing Information Security Awareness Training before the due date is highly encouraged and will not be impact your NetID or access to university systems.

If you cannot complete the initial or annual renewal training by the due date, your supervisor or sponsor will need to submit an exception request using the Exception Request form. 

It will typically take two hours for the NetID to be re-activated after the Information Security Awareness Training is completed in EDGE Learning. 

If your NetID is still disabled two hours after you complete the Information Security Awareness Training in EDGE Learning, please contact the 24/7 IT Support Center at 520-626-8324. 

Supervisors can check upcoming and overdue trainings for direct reports in EDGE Learning. Learn how to access Manager Dashboards. Supervisors are also copied on EDGE Learning overdue notification emails sent to their direct reports.

We ask for your support in achieving compliance by reinforcing this important training in conversations with your team, and ensuring your employees have the time and resources needed to complete the training.

To support training compliance, supervisors can:

  • Monitor email notifications of overdue trainings
  • Supervisors can use the Manager Dashboard in EDGE Learning to view training completion status for their direct reports.
  • Training completion reports for entire units and departments are available to those with specific provisioning access in UAccess Analytics.  

If you have any issues, comments or concerns please contact the 24/7 IT Support Center at 520-626-8324.