Checklist
Evidence Collection Checklist
Turn what you already do into evidence: what to capture, how to label it, and how long to keep it.
Intermediate
25 min
Free
CMMC
NIST SP 800-171
Published · v1.0.0 · 2026-08-01
Template
Security Awareness Log
A single record proving who trained, when, on what version, and with what result.
- Intended audience
- HR and program owners
- Difficulty
- Beginner
- Estimated time
- 15 minutes
- Access
- Free
NIST SP 800-171
NIST CSF
All industries
Version v1.0.0 · Last reviewed 2026-08-01 · Document owner: ComplianceAnvil Content Team
What you will be able to do
- Capture the columns needed to prove who trained, when, and with what result.
- Track course title and version so records reflect the correct training content.
- Set next-due dates so training records stay current rather than one-time events.
Columns to capture
- Name and role.
- Course title and version.
- Assigned date and completion date.
- Score and pass or fail.
- Next due date.
Key takeaways
- A training log must record the course title and version, since training content changes over time and the version matters as evidence.
- Recording score and pass/fail status shows the training was actually completed successfully, not just assigned.
- A next-due date field turns training into a recurring program rather than a single event.
- Assigned date and completion date together show whether training happened on schedule.
- This log pairs directly with the security awareness training course, giving it a concrete evidence trail.
Sources
Written from these public, authoritative publications. ComplianceAnvil paraphrases and summarizes them; it does not reproduce copyrighted control text.
NIST · Revision 3
SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems(opens in a new tab)Link last confirmed 2026-02-01
CISA
Secure Our World — Small Business Resources(opens in a new tab)Link last confirmed 2026-02-01
How this was written and reviewed
Published
- Author
- ComplianceAnvil Editorial Team
- Technical reviewer
- ComplianceAnvil Technical Review Board
- Jurisdiction
- United States (federal)
- First published
- 2026-08-01
- Last reviewed
- 2026-08-01
- Next review due
- 2027-08-01
Version v1.0.0 · Document owner: ComplianceAnvil Content Team
Important
This template is provided for readiness and educational purposes. Organizations should review and adapt it for their environment.
Related resources
Matched on shared frameworks, topics, and program packs.
Checklist
Employee Security Awareness Checklist
The habits every employee should be able to demonstrate, written as a self-check rather than a lecture.
Beginner
10 min
Free
NIST CSF
Published · v1.0.0 · 2026-08-01
Guide
Common Compliance Mistakes
The recurring, expensive errors we see small businesses make — and the cheap correction for each.
Beginner
9 min
Free
NIST CSF
NIST SP 800-171
Published · v1.0.0 · 2026-08-01
Quick reference
Compliance Acronyms — One Page
The acronyms that appear in contracts and assessments, defined in one line each.
Beginner
5 min
Free
CMMC
NIST SP 800-171
Published · v1.0.0 · 2026-08-01
Quick reference
Compliance Project Timeline — One Page
A realistic phase-by-phase timeline for a small business standing up a program.
Beginner
5 min
Free
NIST CSF
NIST SP 800-171
Published · v1.0.0 · 2026-08-01
Checklist
New Employee Onboarding Security Checklist
Day-one security steps that prevent most access and offboarding problems later.
Beginner
15 min
Free
NIST CSF
NIST SP 800-171
Published · v1.0.0 · 2026-08-01
Put this into practice
Resources tell you what good looks like. A Program Pack does the work with you — generated documentation, tracked controls, training, and evidence in one workspace.