Compliance Training Quiz Template
Five workplace-security scenarios put employees against a real pass line. Clear four of five, or go back to review, on the record.
Five scenarios from the security awareness training. The pass line is 4 of 5, your attempt is recorded for the training register, and the retake costs nothing but pride.
Compliance training has a documentation problem: the training happened, but can you prove anyone absorbed it? An auditor does not want your slide deck. They want a register showing who was assessed, when, on what, and whether they passed. This quiz produces that register as a side effect of being taken. Five scenarios, an automatic 4-of-5 pass line, identity captured up front, and every attempt timestamped in your responses view.
How the pass line works. Each scenario adds a point to the score variable when the compliant answer is chosen, and two rules split the outcome: 4 or 5 reaches the Passed ending, 3 or fewer lands on Review and Retake. Both endings state the score and what it means, so there is no ambiguity for the employee and no interpretation left to whoever reads the register later. Adjusting the pass line is one number in the Logic panel.
Why scenarios instead of definitions. "What is phishing?" tests vocabulary; the gift-card CEO email tests behavior, which is the thing that gets companies breached. Each distractor here is a documented incident pattern: replying to the phishing email for confirmation, plugging in the found USB to identify its owner, the polite tailgate, the password shared with a colleague and rotated after. If an employee picks the plausible-but-wrong option on this quiz, better here than in the parking lot.
Why the check stays short and fair. Trick questions and near-identical answer pairs stay out, because a compliance check must be passable by anyone who absorbed the training, or the retake queue becomes a grievance queue. Long banks of twenty questions stay out too: five sharply chosen scenarios measure the same thing with far less resentment, and resentment is the enemy of security culture.
Who logs it, and swapping in your risks. HR and IT teams run annual security awareness cycles, startups build their first SOC 2 or ISO evidence trail, compliance officers need completion records by named employee, and managers onboard new hires into regulated workflows. To adapt it, replace the scenarios with the risks from your own incident history and policy (data handling, expense rules, safety procedures), keep one clearly compliant answer per question, then re-key the five scoring rules in the Logic panel. Password-protect the form so the register holds only your staff, and set the close date to your training deadline. The CSV export, filtered to passes, is the completion evidence; the name and employee ID columns make reconciliation against your HR roster a five-minute job. Failed attempts stay in the register too, which is a feature, because "reviewed and retook it" is exactly the paper trail an auditor likes to see.
Frequently asked questions
Does a failed attempt block the retake?
A fail sends people back to the material, and they can submit again. Every attempt is stored with its timestamp, so the register shows the full path to passing.
How do I produce completion evidence for an audit?
Export the CSV: each row carries the name, employee ID, per-question answers, computed score, and submission time. Filter on passing scores and you have the register.
Can I keep non-employees out of the quiz?
Enable password protection in Settings and share the password through your internal channel; only staff with it can open the form.
Can I change the pass threshold?
The pass and retake rules in the Logic panel compare the score against a number. Raise it to 5 for zero-tolerance topics or lower it if you extend the quiz.
How do I enforce a training deadline?
Set a close date in Settings; the form stops accepting attempts after it. Anyone missing from the CSV at close is your follow-up list.