Trainings
Cirro allows certain users to set governance policy and training requirements for a project to prevent users from accessing data if they are not in compliance with institutional policies.
Governance trainings are requirements that project users must complete before using a project. If a training is added after a project has been created, it will immediately block access to all users of that project until they complete the training. Examples include HIPAA trainings and human subjects protection (HSP) trainings.
Project administrators can set trainings for their own project, and organization administrators can assign trainings to any projects by assigning them through their data classifications. When organiaztion admins set trainings, they will only need to be completed once and will apply to all the user's projects.
Note: This page is available if your organization have governance features enabled.
Adding a Training
To add a new governance training, navigate to the Trainings page and click the "Create Training" button at the top of the page.
- Training Name: The trainings's title within Cirro.
- Training Description: A description of what the training covers.
- Enactment Date: The date on which you want to start to apply this training to projects.
- Verification: How the user will prove their completion of the training.
- Certificate: The user will need to upload a certificate they received after completing the training.
- Self-Attestation: The user will need to check a box affirming that they have completed the training.
- Points of Contact: The governance contacts that will be displayed to users to contact if they have questions about this requirement.
- Expiration: Select from the allowed methods for setting an expiration date for the user's fulfillment of the training:
- None: The fulfillment will never expire and the training will continue to apply to the project unless it is deleted.
- Absolute: The fulfillment will expire on a set date, and you will be asked to provide that date. After that date, the training will be no longer apply to the project.
- Relative to Completion: The fulfillment will expire a set number of days after a user completes the training, and you will be asked to provide the number of days. Once the number of days elapses, users will need to re-complete the training.
- Relative to Enactment: The fulfillment will expire a set number of days after the enactment date set above, and you will be asked to provide the number of days. Once the number of days elapses, users will need to re-complete the training.
- Supplementals: Use the "Add File" and "Add Link" buttons to supply names, descriptions, and files/links for users to use to access the trainings in files and external websites.
Editing or Deleting a Training
Trainings are organized in a table and by default are sorted by their name. You can change the sorting and add/remove columns using the three dots in the table header , and also filter the trainings using the sidebar on the right side of the page.
Trainings can expire if they were defined to have an absolute expiration date. If that absolute date has passed, the training is considered expired and will no longer appear in projects (though it will stay applied to any classifications). If a training has expired, you will see an error icon in the table: . You can re-apply an expired training by editing the expiration selection.
To change something about a training or delete it, click on the training in question to get a pop up and see the same options listed above.
Warning
Deleting a training will also delete all records of users completing the requirement. Confirm you do not need a history of user fulfillment before deleting.
Applying a Training to a Project
Once a training is created, it can be applied to as many projects as you wish. You can add a training to a project by adding the training as a requirement for a data classification and then applying that data classification to the project.
To add a training to a data classification, either add or edit a data classification on the Classifications page, and then select the Training from the list of options under the Requirements header.
To apply a classification to a project, either add or edit a project on System-level Projects page or by navigating to a project's Overview page and clicking the "Edit Project" button. From there, find the "Data Classification" section header, and toggle the switches to add or remove classifications from a project.