Data classification & handling
A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 7 details that are specific to your organisation.
- Length
- 25 min
- Lessons
- 7 lessons
- Frequency
- At hire + annually
- Last reviewed
- 8 Oct 2026
Procurement specialist asked by a new vendor to email the full customer database "for onboarding"
Try it: this is one of 11 interactive activities in the course.
What's included
Three pieces that work together
Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.
Self-paced course
Short lessons with real workplace scenarios, not walls of text.
- 7 lessons, about 25 minutes
- 1 video slot (you add the videos)
- Scenario, tabs, flashcards, sorting activity and quizzes
- 10-question final check, 80% to pass
Live session deck
An AhaSlides presentation to run after the course, in person or online.
- 9 slides
- Quiz, poll, word cloud, open-ended slides
- A closing slide for your contacts
Two surveys
Find out what landed, and whether people use it on the job.
- Post-course feedback, about 2 minutes
- 30-day check-in
- Anonymous by default
- Results feed your next refresher
Learning objectives
At the end of this course, learners can
Each objective and the lesson that covers it.
| ID | Objective | Source | Where it's covered |
|---|---|---|---|
| TO 1.0 | Achieve ≥ 80% on the final assessment | - | Whole course |
| LO 73.1.1 | Explain why classification protects customers, the company and you | ISO 27001 A.5.12 | Lesson 1: Why the rule exists |
| LO 73.2.1 | Identify the company's classification levels and examples + your info | A.5.12; SOC 2 C1.1 | Lesson 2: What's covered |
| LO 73.3.1 | Label, store, share and dispose of data by level + your info | A.5.13, A.5.14, A.8.10; C1.2 | Lesson 3: Allowed vs not allowed |
| LO 73.4.1 | Recognise mishandling red flags | A.5.10 | Lesson 4: Red flags & duties |
| LO 73.5.1 | Report a misclassification or data mishandling + your info | A.6.8 | Lesson 5: Case practice |
Your part: what a template can't do for you
- Your workplace details: fill in the 7 highlighted fields so the course describes your own policies, contacts and locations.
- Records: record completion in your own LMS or record system.
Course outline
7 lessons, about 25 minutes
Minutes per lesson are an estimate, shared out by page count.
1Why the rule exists
2 pages
4 min
Why the rule exists
2 pages
2What's covered
2 pages
4 min
What's covered
2 pages
3Allowed vs not allowed
2 pages
4 min
Allowed vs not allowed
2 pages
4Red flags & duties
2 pages
4 min
Red flags & duties
2 pages
5Case practice
2 pages
4 min
Case practice
2 pages
6Escalate correctly
1 page
2 min
Escalate correctly
1 page
7Final assessment
Assessment
3 min
Final assessment
Assessment
Live deck and surveys
9 slides to run live, two surveys to close the loop
Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.
Post-course feedback: 11 questions, about 2 min
- Overall rating 5 stars
- Relevant, realistic, right length, helpful activities agree/disagree grid
- What was most useful? multi-select
- Confidence before this course, and now 1-5 scale
- How confident are you classifying… grid
- Do you label documents when you create them? multiple choice
- Which type of file are you most unsure how to share? short text
- Our approved tools make secure sharing as easy as insecure sharing. 1-5 scale
- One thing we should change or add open text
- Would you recommend this course? NPS
30-day check-in
- Have you used what you learned since the course? multiple choice
- How confident are you today? Compare with day 1 1-5 scale
- Do you know where to find our classification levels and handling matrix? yes / no / not sure
- A moment where the training helped, or where you weren't sure open text
- Which topics should the next refresher focus on? ranking
Results show whether people use the training on the job, not just whether they finished it.
Make it yours
7 fields to fill in, and you're ready
Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.
- Classification levels
{{CLASSIFICATION_LEVELS}} - Handling matrix
{{HANDLING_MATRIX}} - Approved storage and sharing tools
{{APPROVED_STORAGE_AND_SHARING_TOOLS}} - Secure disposal process
{{SECURE_DISPOSAL_PROCESS}} - Data owner directory
{{DATA_OWNER_DIRECTORY}} - Security hotline
{{SECURITY_HOTLINE}}
Show all 7 fields
- LMS or record system
{{LMS_OR_RECORD_SYSTEM}}
FAQ
Common questions
Can I run data classification & handling training online?
The course itself is self-paced and online, and the live deck lets you add a live session. Whether online delivery meets your local rules depends on the law that applies to you, so check ISO/IEC 27001:2022 Annex A 5.12 or ask your own counsel.
How often is this training needed?
At hire + annually.
Who needs this training?
All employees; variant: data owners and engineers (adds labelling automation and retention).
What records should I keep?
Record completion in your own LMS or record system, so you can show who finished the course and when. Check the retention period that applies to you in ISO/IEC 27001:2022 Annex A 5.12.
Can I edit the content?
Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply. Keep anything your own law requires you to cover.
Related templates
Often taught together
AI acceptable use at work
All employees using generative AI tools · Privacy & Security
Remote work & mobile device security
Remote and hybrid employees · Privacy & Security
Insider threat awareness
All employees; mandatory variant for · Privacy & Security
Social media & communications policy
All employees; variant: official · Privacy & Security
Ready to run it?
Open the live deck to see how the session runs alongside the course and both surveys.