isabella232 / security-training-templates

WebSlides examples for security training (e.g. HIPAA); and how to publish training records to JupiterOne graph

Security Training Templates

Contains examples of lightweight security training built with WebSlides.

Currently including the following:

• HIPAA Security and Privacy live example

Publish Training Record to JupiterOne

You can create training records in YAML and publish them to your JupiterOne (J1) account.

See records/hipaa.yaml for example training entity and records. The file has two parts:

• entity: has all properties needed to create a Training entity in J1
• records: contains an array of training completion records, each has an userEmail and a completedOn date/timestamp.

You will need to create a .env file that contains the following environment variables specific to your J1 account:

J1_ACCOUNT_ID=
J1_API_TOKEN=

Alternatively, instead of using an API token, you can also specify username and password:

J1_ACCOUNT_ID=
J1_USERNAME=
J1_PASSWORD=

With that, run yarn && yarn publish:j1.

Querying Training Records in JupiterOne

Once published, you can run a J1QL query in your JupiterOne account to generate reports and/or visualization.

For example:

Find Person that completed hipaa_training return tree

Here's a query to generate a report with records:

find Person as p
  that completed as r hipaa_training as t
return
  p.displayName, p.email, t.displayName, r.completedOn

License