Early access is open for UK employers.Training for your next audit

Audit-ready training

The training evidence your auditor will ask for.

Security and privacy frameworks expect trained people and a record of their training. Kapi Works assigns the training, tracks completion and keeps the evidence.

FrameworkWhat auditors look forKapi Courses
ISO 27001:2022Annex A 6.3: information security awareness, education and training.
Cyber security awarenessPlanned
SOC 2CC1.4 and CC2.2: competent people who know their security responsibilities.
Cyber security awarenessPlanned
PCI DSS 4.012.6: security awareness at hire and at least every 12 months. 6.2.2: yearly secure software training for developers.
Cyber security awarenessPlannedSecure development for engineersProposed
HIPAA Security Rule164.308(a)(5): security awareness and training for the whole workforce.
Cyber security awarenessPlanned
GDPRArticle 39(1)(b): awareness-raising and training of staff who handle personal data.
Data protection at work
ISO 42001Clauses 7.2 and 7.3: competence and awareness for people working with AI.
AI at work

Your auditor decides whether evidence meets a control. Kapi Works provides the training and the records, not a certification.

Kapi Worksin partnership withTengriSys

Audit readiness and training, side by side.

Kapi Works and TengriSys work in partnership. TengriSys helps teams get audit-ready and work with their auditor in one place. Kapi Works runs the training those audits ask for.

  • Find the controls that call for trained people
  • Assign and track that training on Kapi Works
  • Share the records with your auditor as CSV
  • A direct connection between the two Planned
Visit TengriSys ↗
Example

TTengriSys

GDPR · Article 39: staff training

Evidence needed

Kapi Works

Data protection at work · 24 of 25 completed

Records ready

Courses for audits

The training most audits ask about.

All courses
In production
Data protection

Data protection at work

Make thoughtful decisions about the personal information you handle every day.

View course
In production
Responsible AI

AI at work

Use AI with better judgement. Know what to share, what to check and when a person should decide.

View course
Planned · first wave
Security awareness

Cyber security awareness

Build everyday habits that help protect your accounts, devices and company information.

View outline
Proposed
Secure development

Secure development for engineers

Build security into everyday engineering, from handling input to reviewing changes.

View outline

Getting audit-ready? Add the training evidence.

Early access runs as a pilot with a written scope, agreed with you.