��ɫӰ��

utilizes Single Sign-On (SSO). To log in, enter your alaska.edu email address. You will then be redirected to a login page to enter your username and password, followed by a Duo authentication prompt. Once successfully signed in, your assigned training will appear in the upper left corner of your dashboard.

Once logged into , your assigned training will appear in the ‘Training Progress’ section in the upper left corner of your dashboard. You can click the ‘Go To Training’ button to navigate to the Training tab and view all current assignments, both complete and incomplete. Once a module is complete, you will be able to download a certificate here as well.

Our new training platform, sends out notifications to let people know when there is new training available and give them an easy way to access it quickly.

To verify the legitimacy of training notification emails, check for key details:

• Valid Dates: Initial annual training notices will be dated September 1, 2025, or your hire/contract return date. ASAP training notices align either with the first day of each quarter or your enrollment/contract return date.

• Visual Cues: Look for the UA logo inside a blue border at the top of the email.

• Sender Info: The message should come from “UA Security Awareness Training” (training@kb4.alaska.edu).

• Safe Links: Hovering over any link should preview a knowbe4.com address.

If you're unsure, use the Phish Alert Button (PAB) . It will confirm whether the email is trustworthy or forward it to IT Security for review if it’s suspicious.

Thank you for your caution when dealing with unexpected emails. Your careful attention to detail helps keep the UA community safe!

The University requires annual security awareness training for its faculty and staff in order to comply with regulations such as GLBA, HIPAA, and CMMC. Regulatory compliance supports essential services and funding opportunities on campus. However, the true value of annual training lies in keeping pace with the rapidly evolving cybersecurity landscape, especially considering the recent rise in AI-driven phishing, ransomware, and sophisticated malware attacks.

Staying informed empowers the UA community to detect and respond to threats effectively. For those seeking deeper cybersecurity knowledge without increasing the amount of annual training time, the Advanced Security Awareness Program (ASAP) offers quarterly micro-trainings, an optional monthly newsletter, and simulated phishing exercises. Interested participants can enroll using this .

To check your training status, log into and navigate to the Training tab, where you’ll see all modules currently assigned to you. Once you’ve completed a module, it will give you the option to download a certificate. You may keep this for your personal records if you’d like, but you’re not required to submit it to verify completion. If you’re still not sure whether you’ve finished all assigned training, or if a completed module isn’t showing up as such, please let us know and we will be happy to assist you.

UA is obligated under regulations such as GLBA, HIPAA, and CMMC to provide annual cybersecurity training for all faculty and staff, typically administered at the beginning of the fall semester. Skipping an annual training session based on prior participation would result in a gap exceeding one year between modules, and causing a breach of compliance. 

Additionally, given the rapidly evolving nature of cybersecurity, it is critical to stay informed. This year’s training is delivered through the updated platform and features content created in February 2025, replacing the previous PageUp module from May 2019. That’s a six-year leap in cybersecurity advancements not reflected in the earlier training. 

Once completed, this year’s training will remain valid until next fall, when updated content will be released. If you’re having trouble logging in or finding the training module, please let us know and we will be happy to assist you.

Simulated phishing exercises play a vital role in cybersecurity training by allowing users to practice identifying and responding to real-world threats in a safe, risk-free setting. If a link is mistakenly clicked during a simulation, you'll be redirected to a page highlighting missed red flags to help you spot them in the future. Successfully reporting the email using the Phish Alert Button (PAB) confirms it was a test and helps reinforce best practices. Since actual phishing attempts can target anyone unpredictably, it’s essential that all users build and maintain the skills to respond effectively. This proactive training boosts preparedness and reduces risk when genuine threats arise.

We understand that people get busy and that, while quarterly training may seem like a small commitment at the beginning, it can start to feel overwhelming when you're trying to do everything else too! If your quarterly module is over a month past due, we’ll simply transition you from the quarterly Advanced Security Awareness Program (ASAP) back to the annual training program for the time being so you can focus on other responsibilities. If you’re still interested once your workload is lower, you can rejoin ASAP at any time by resubmitting the original .

It’s important to regularly review and acknowledge policies that we are expected to abide by, especially when they are subject to change. UA’s Acceptable Use Policy (AUP) was updated in January 2025 to respond to emerging threats, changes in legal and regulatory requirements, and technological advances. Since departments use this policy as a foundation for their own security standards, it’s crucial for faculty and staff to review the updated document, so they can update their standards accordingly. To that end, we are sending it out to all faculty and staff with their annual training. Please take time to review the AUP carefully, and feel free to reach out if you have any questions.