Mandatory behavior training
With behavior-based remediation on, a user who fails a phishing test is offered a short training module tied to the defensive habit they missed — but finishing it is up to them. Some clients want more than an offer. Require completion turns that offer into a tracked assignment: the user gets the matching module as a required course with a due date, it shows up in their learning portal and in training reminders, and you can see exactly who has finished, who hasn’t, and who is overdue.
When the toggle is off, nothing about the remediation flow changes — the module is still offered on the landing page and in the day-after email, just not tracked.
You’ll need
Section titled “You’ll need”- Behavior-based remediation on for the clients you want this for. Require completion is a sub-setting of that feature — the toggle is disabled while remediation itself is off.
Set the partner-wide default
Section titled “Set the partner-wide default”-
Open Settings → Phishing. Find the Behavior-Based Remediation card.
-
Turn on the Require completion sub-toggle. It sits below the main toggle, with a short description of what changes. It can only be switched on while behavior-based remediation is on.
-
Save. Your default applies to every client whose own setting is on Inherit (the default for new clients).
Override for one client
Section titled “Override for one client”-
Open the client → Tailor → Phishing. The Behavior-Based Remediation card shows the same Require completion sub-toggle, with an Inheriting from your organization’s default [on/off] label.
-
Set the override. Flip the sub-toggle to opt this client in or out independently of your partner default.
-
Save. Use Clear override (inherit) later if you want the client to follow your default again.
What the user experiences
Section titled “What the user experiences”After a confirmed failure on a behavior-tagged phishing test, the matching module appears in the user’s learning portal as a required course, due two weeks out. It’s prioritized near the top of their course list so it gets done promptly, but it never displaces a compliance-framework deadline. The user is nudged through the standard training reminder emails until they finish.
If the user already completed the module right after the click — straight from the landing page — the assignment is recorded as completed from the start. They won’t be reminded to redo work they’ve already done.
Follow completion for a client
Section titled “Follow completion for a client”-
Open the client → Tailor → Phishing and click View behavior training assignments.
-
Read the summary tiles. The Behavior Training Assignments page opens with counts of Assigned, Overdue, and Completed.
-
Work the list. Each row shows the user, the course, the defensive behavior it trains, the assigned and due dates, and a status pill. Overdue rows sort to the top; use the All / Assigned / Overdue / Completed filters to focus.
Browse the course catalog
Section titled “Browse the course catalog”Want to see what your users are actually assigned? Settings → Behavior Training Catalog lists the four defensive behaviors, the short course mapped to each, and the quiz a user passes to complete it. It’s the same catalog for every client — useful when a client asks “what exactly will my people be required to take?”
You’ll know it worked when
Section titled “You’ll know it worked when”- The Behavior-Based Remediation card reads Require completion is on (at partner settings, or on the client’s Tailor → Phishing page).
- The day after a user fails a behavior-tagged test, they appear on the client’s Behavior Training Assignments page with a due date.
- The assigned course shows in that user’s learning portal as required.
- When the user finishes the module, their row flips to Completed.
Frequently asked
Section titled “Frequently asked”A user failed two phishing tests for the same behavior — do they get two assignments? No. While an assignment for a behavior’s course is still open, additional failures fold into it. Once the user completes the course, a later failure creates a fresh assignment — the habit evidently needs another pass.
The user did the training right from the phishing landing page. Are they still assigned? The assignment is still recorded — so it appears in your tracking — but it’s marked completed immediately. They get no reminders for it.
Do these assignments affect my training completion metrics? No. Behavior training assignments are tracked separately from the assigned curriculum, so a wave of phishing failures won’t drag down a client’s training completion numbers. Use the Behavior Training Assignments page to follow them.
What happens when I turn Require completion off? New failures stop creating assignments. Assignments that already exist stay tracked and stay visible on the Behavior Training Assignments page — turning the toggle off doesn’t erase anyone’s outstanding work.
What if the phishing test isn’t behavior-tagged? Nothing is assigned. Like the rest of behavior-based remediation, this only applies to tests tagged with a defensive behavior.
A user is overdue — then what? The row shows Overdue on the assignments page and the user keeps receiving training reminders. There’s no automatic escalation beyond that; the page gives you the list to follow up on directly.
Can I change the due date or excuse a user? Not today. Due dates are set automatically when the assignment is created.
Does the assignment change the user’s risk score? No differently than before. The phishing failure itself drives the score the same way whether or not Require completion is on.
Related
Section titled “Related”- Behavior-based remediation — the parent feature this rides on, including the four defensive behaviors and behavior reporting.
- Read phishing activity — drill into the individual failure that produced an assignment.
- Partner-level settings — where your partner-wide defaults live.