Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company's security controls. Security training provided by SafeStack forms an integral part of a robust compliance and security control strategy.
We are happy to announce our new Drata integration functionality, allowing customers to automatically upload completion evidence of their learners’ security training, from SafeStack, into Drata.
Just pick the learning paths you want to track when setting up the integration and you’re good to go! When users complete their learning paths, an evidence PDF will be generated and uploaded to Drata automatically, marking their own security training as completed within Drata.
This removes the hassle of uploading evidence manually for your team and keeps compliance information in Drata up to date.
If your organization is using, or planning to use Drata to automate compliance related tasks, check out our Drata integration today.
We’ve just released the new Learning Path Statistics report to help our group leaders analyze learning path engagement, participation and completion over time.
This new report contains 3 types of graphs, each designed to highlight key pieces of information that help you better understand the effectiveness of your learning paths and security training.
Graph 1: Learning Path Course engagement
This graph highlights the engagement of your learning path at the course level. It can help answer questions like:
What courses are being fully completed by my learners?
What courses are being started but not completed by my learners?
What courses are not being started at all by my learners?
What courses are most engaging, and which ones are my learners not too interested in?
Graph 2: Learning Path Engagement
This pie chart compares the percentage of your learners that have not yet started, started and completed your learning path as a whole. This can help group leaders visualize learning path engagement easily. Over time, one would want the red slice to reduce in size and the green slice to increase in size.
Graph 3: Learning Path completion over time
This graph plots the cumulative percentage of users that have completed the learning path, over time. This is really useful to understand how quickly your team is ramping up with their training and how much training there is still left to be done, before you hit the learning path due date (if there is one).
Other functionality
Graph toolbar
The graph toolbar (top right of every graph) can be used to download the graph in the PNG or SVG format. You can also download the raw data behind the graph, by downloading using the CSV format option.
For time series graphs (like the Learning Path completion over time graph), you can also zoom in/out or drag and select a specific time range you want to explore within the whole period.
Reports page
We’ve made minor changes to the Reports page to separate individual reports from group reports much more clearly.
More interesting changes ahead
In the future, we plan to add more functionality to these reports to take them a step further, making it easy for group leaders to communicate with their learners about their training. But we will have more on that later!
We hope you enjoy the new changes in SafeStack and are always open to feedback, suggestions or concerns.
SafeStack Seminars are an easy way to engage your application security champions on a regular basis. With seminars, your team can keep updated with new threats and secure development best practices in our interactive sessions with expert coaches.
More than 30 seminars have occurred since SafeStack was launched, covering a wide range of topics, including threat modeling, AI, DevOps, SAST and so on. Every topic is sourced from our community and customer suggestions, so they are guaranteed to be timely, relevant, and focused on current and emerging secure development best practices.
A feature requested by many customers is the ability to add seminars into learning paths, allowing security champions to craft outcome focused training programs, along with high quality, interactive, bite-sized training for specific topics covered in our seminars.
From today, all our past seminars are available as courses on the platform! They can be added to learning paths, just like any other course. Further, reports will indicate whether a learner has completed watching a seminar or not, from this point onwards, providing much more visibility about seminar related training to group leaders.
We will continue to host live seminars based on customer suggestions and our roadmap. You will still be able to register for live seminar sessions from the platform. Once a live seminar has finished, it will be available as a course on the platform, so that your team can watch it at a later date.
Our support team is available via email at [email protected] to answer any questions you may have about this change.
As learners watch a lesson, SafeStack will track their progress in the background and will mark a lesson as being completed. Occasionally, learners may find that their lesson wasn’t marked as completed depending on external factors such as their network connection. This would mean the learner would have to re-do the lesson or contact our support team for assistance.
We’ve introduced the ability for learners to mark a lesson in the Secure Development program as complete, which group leaders can opt-into from the Organization section under the Settings menu.
Turning this option on will show a Mark as Complete button alongside the player controls when a learner is watching a lesson. Learners are asked to confirm their decision, warning them that their lesson progress will reflect that it was manually completed.
When setting up your Learning Path, you’ve previously been able to add a due date that your learners should have completed their courses. This due date in some instances would show as being a day forward or behind depending on if learners were in a different timezone.
We’ve now added the ability to set the due time that courses should be completed by, and improved how the due date is shown to group leaders and their learners based on their current timezone.
In a move to simplify our subscription structure, we've merged the Enterprise Plan with the Team Plan, creating a more straightforward and cohesive offering, while all features remain available. It’s important to note that this update will not impact our existing customers, except for the actual plan name being changed.
We're thrilled to introduce a brand-new Organization Settings page, designed to streamline your organizational management tasks and configure SafeStack to meet your team’s needs. Access to this page is reserved exclusively for group leaders of customers on our paid Team plan.
Within this page you’ll find a handy new option to ensure that users from your organization, signing up to SafeStack on their own, get added to your existing SafeStack organization, instead of being added to a completely new SafeStack organization.
Note that such users will be invited as Learners into your SafeStack organization and will not occupy any seats, until a Group Leader assigns them to one of our training programs.
To keep your learners on the path to success, we’ll now send out a reminder to those who still have courses to complete. An in-app and email notification will be sent a few days before the due date of their Learning Path, and contain a quick link for them to finish their Learning Path.
Learners can opt-out of email notifications from their Profile page.
The SafeStack - Vanta integration now sends your users' security and compliance training data to Vanta every hour, so it can be included in Vanta's monitoring and reports.
SafeStack’s Security Awareness programme contains a lot of courses that help you meet compliance training requirements for frameworks like ISO27001, PCI DSS and SOC2.
If your organization is using Vanta to automate compliance related tasks, check out our Vanta integration to send your SafeStack users - and their compliance training information, automatically to Vanta.
