ADHICS Training Certificates and Renewal: How They Work

Certificates are the tangible output of your ADHICS security awareness program: they prove, per employee, that training happened and knowledge was assessed. This guide explains how compliant training certificates are issued, verified, and renewed.

Automatic issuance after assessment

A defensible certificate should be tied to a passed assessment, not mere attendance. On Cisoshare Training, certificates are generated automatically the moment an attendee passes the course assessment — removing the manual step where records typically go missing.

Verifiable certificate numbers

Every certificate carries a unique certificate number that anyone — including an auditor — can check on a public verification page. This lets third parties confirm a certificate is genuine without contacting your organization or the training provider.

One-year validity

Training certificates expire after one year, matching the ADHICS SA-1.4 requirement for annual renewal of security awareness training. An expiring certificate is your signal that the employee's training cycle must be repeated.

Renewal

Renewal is simply re-enrollment: the employee takes the course and assessment again, and a new certificate replaces the expired one. A certificate expiry schedule report helps compliance teams plan renewals a month or two ahead of expiry rather than discovering gaps during an audit.

Identity verification

For a certificate to stand up to audit scrutiny, it must be clear the right person completed the training. Certifying courses require a selfie photo and identity waiver from the attendee, creating a verifiable link between the certificate and the individual named on it.