Cybersecurity Awareness Training: Employee FAQ
This fall, UMass Amherst will launch its annual required Cybersecurity Awareness Training campaign for employees and student employees. The training helps employees recognize and respond to common cybersecurity threats, including phishing, social engineering, credential theft, ransomware, and other risks that can affect University systems, research, and sensitive data.
About the Training
Why is UMass requiring this training?
Cybersecurity threats continue to evolve, and employees play an important role in protecting University information, systems, research, and sensitive data. Annual training helps employees recognize common threats and understand how to respond when they encounter them.
Who is required to complete the training?
The annual Cybersecurity Awareness Training is required for all UMass Amherst employees who are assigned the training, including student employees.
How will I access the training?
The training will be assigned through Skillsoft Percipio. When the training is assigned, you will receive an automated email from Skillsoft Percipio with instructions for accessing the course.
How long does the training take?
The training takes approximately 30 minutes to complete.
When should I complete the training?
You should complete the training as soon as possible after it is assigned. The campuswide Cybersecurity Awareness Month campaign begins October 1, but you do not need to wait until then to complete the training.
How often is the training required?
The Cybersecurity Awareness Training is required annually for employees who are assigned the training.
Will I receive reminders?
Yes. Employees who have not completed the training will receive automated reminder emails beginning October 1. Reminder emails will stop automatically once you complete the course.
Training Deadlines and System Access
What happens if I do not complete the training?
System access restrictions will be implemented in phases for employees who have not completed the required training.
14 days after the training is assigned:
You will receive a mandatory sign-in notification requiring acknowledgment. No system access will be removed at this stage. The notification will continue until you complete the training.
21 days after the training is assigned:
Access will be limited to email, HR systems, and Skillsoft Percipio.
28 days after the training is assigned:
Access will be limited to HR systems and Skillsoft Percipio.
When will restrictions be removed after I complete the training?
Applicable restrictions will be removed the day after you complete the required training.
Can my restrictions be removed sooner?
If you need your restrictions removed sooner, contact the IT Service Desk at it [at] umass [dot] edu (subject: ) (it[at]umass[dot]edu) and provide a copy of your training completion certificate.
Please note that restrictions may remain in place until the service request is processed, so submitting a certificate does not guarantee immediate removal of restrictions.
Student Employees
Are student employees required to complete the training?
Yes. Student employees are required to complete the University's annual Cybersecurity Awareness Training when it is assigned to them.
How will student employees know when they need to complete the training?
Student employees will receive an email from Skillsoft Percipio when the training is assigned. Student employees should complete the training as soon as possible after receiving the assignment.
Do the same access restrictions apply to student employees?
Yes. Student employees who are assigned the required training should follow the training requirements and deadlines communicated to them. System access restrictions will be implemented in phases for student employees who have not completed the required training.
Campaign Timeline
| Date | What happens |
|---|---|
| September 1 | Required training is assigned through Skillsoft Percipio. Employees receive an automated email with instructions for accessing the course. |
| October 1 | The campuswide campaign launches in conjunction with Cybersecurity Awareness Month. |
| 14 days after assignment | Mandatory sign-in notification begins. No system access is removed. |
| 21 days after assignment | Access is limited to email, HR systems, and Skillsoft Percipio. |
| 28 days after assignment | Access is limited to HR systems and Skillsoft Percipio. |
Special Circumstances
What if I am on leave when the training is assigned?
Additional guidance will be provided for employees who are on leave or have other special circumstances that may affect their ability to complete the training.
What if I am a new employee?
Additional guidance will be provided for new hires regarding when the training will be assigned and when it must be completed.
What if I have a problem accessing the training?
If you are having trouble accessing Skillsoft Percipio or completing the training, contact the IT Service Desk at it [at] umass [dot] edu (subject: ) (it[at]umass[dot]edu) for assistance.
How can I verify that I completed the training?
You can retain your training completion certificate as confirmation that you completed the course. If you need to request that access restrictions be removed before the normal system update, include a copy of your certificate when contacting the IT Service Desk at it [at] umass [dot] edu (subject: ) (it[at]umass[dot]edu) .
Questions and Support
Who should I contact if I have questions about the training requirement?
The following support options are available to UMass Amherst employees who need assistance with the required cybersecurity training:
- Contact compliance [at] umass [dot] edu (subject: ) (compliance[at]umass[dot]edu) with questions about employee training requirements.
- Contact the IT Service Desk at it [at] umass [dot] edu (subject: ) (it[at]umass[dot]edu) if you experience technical issues with the training.
- Contact UMass Amherst Accessibility if you experience accessibility issues related to the training.