Setting Assignment Strategy

You can set assignment strategies for new users in your organization. There are four different assignment strategies available, and you can choose your preferred assignment from the ones below.

Overview of Assignment Strategy:

1. None: 
   No activities will be automatically assigned to new users. Choose this option if you prefer to manually assign activities to specific teams or individual users as needed.
   
   Note: If you select this option, refer to this article for step-by-step instructions on how to assign activities manually on an ad-hoc basis using the Simple Assignments.
   
   
2. Initial Plan:
   This option is for organizations that want to roll out a custom Secure Coding Program. New users are assigned initial Labs/Learning Paths based on the organization’s pre-defined Training Plan. If a Training Plan is not available or no iterations are in scope, a fallback is assigned based on the 'Initial Path' strategy.
   
   
3. Initial Path: 
   The option assigns an initial learning path tailored to the user's core technology, based on the technology selected during the onboarding questionnaire. With a 60-day completion window, it establishes a baseline of competency across various vulnerability classes, fostering timely progress and foundational skill growth.
   
   
4. Initial Labs: 
   With this option, new users are assigned two initial labs based on the technology selected during the onboarding questionnaire

Initial Plan

If you choose the Initial Plan as your assignment strategy, you’ll need to create a training plan that users automatically receive when they onboard the platform. The training plan becomes active after the user completes the onboarding questionnaire.

Define a Training Plan for Your Organization

Create a training plan that aligns with your organization’s goals and the time your developers can commit.

We offer three suggested training plan formats:

1. Lightweight Plan (10h - 16h)– suitable for organisations doing a secure coding program for the first time.
2. Standard Plan (18h - 16h) – Balanced approach; ideal for most organisations.
3. Intensive Plan (26h - 40h )– Comprehensive coverage; recommended for  security champions.

Choose the plan that best aligns with your objectives, then configure it using training iterations.

Each activity shown in the infographic below—except tournaments—must be created as a training iteration after the program launches. Training iterations are the core components of a training plan. You can stack them sequentially to build a structured, goal-driven experience.

Note: Check out this article on how to configure tournaments.

Setting Up a Training Plan

You can set an automated training plan for an entire year on the platform. To set up your training plan, please follow the steps below:

Step 1: Browse to the Orgs tab, click to view the organization’s details, select the Assign Activities button under the Training Activities section, and choose the Training Plan tab. 

Training Iteration Timeframe

The training plan works by defining a list of training iterations. Training iterations can be based on dates or duration. Assignments are performed every eight hours and automatically applied to newly onboarded users if the Initial Plan strategy is selected.

Step 2: Browse to the Orgs tab and click the Assign Activities button under the Training Activities tab.

Step 3: Click the Training Plan tab and then click the Add Iteration button.

Creating Iteration by Dates

You can specify a start and end date for the training iteration. This option is especially useful if you want to train a specific number of users within a defined timeframe (e.g., from now until December 31st).

Step 4a: To create an iteration based on dates, select by Dates and provide start and end dates.

Note:  If you're onboarding users in phases, using the duration option rather than date-based iterations is recommended. With date-based iterations, newly onboarded users are automatically assigned to the iteration based on when they join. The duration option ensures users are assigned to the same training iteration regardless of when they are onboarded.

With the duration option, you can set the number of days for both the training iteration and the pause period once the iteration is complete. The next iteration will begin after the pause. Iterations will run in the order they are defined, but you can reorder them by drag-and-drop in the interface and select the Update Order button.

Creating Iteration by Duration

Step 4b: If you want to create an iteration based on duration, select by Duration and provide the number of days. Enter the number of days to pause before the next iteration begins.

Note: It’s not possible to have iterations based on Dates and iterations based on Duration active at the same time.

Training Iteration Activities

Using either Dates or Duration, you can assign activities as either Learning Paths or individual Labs selected through our adaptive training algorithm.

Note: A Learning Path combines Knowledge Base articles and videos coupled with our hands-on Labs to form comprehensive courses. Individual Labs based on Adaptive Training should be used to consolidate and improve existing metrics gaps after the initial baseline has been established.

Assign Learning Paths

To assign Learning Paths to users, you can choose from two options: 

1. User's Core Technology - Users can select their core technology, and Learning Paths will be assigned based on their choice.
2. User's Tag(s) - Admins can assign activities to users by adding relevant tags.
   
   

Assign Learning Paths by Technology

Activities can be assigned to users based on their chosen core technology.

Step 1: In Activities, select the Learning Paths radio button.

Step 2: In Assign, select the Technology radio button.

Step 3: Click the Choose button by the desired technology to display its Learning paths, then click on Select to add your preferred Learning Path for the chosen technology.

We recommend using the technology-based default assignments as the first iteration. Click the Baseline Assignments button to populate the selection automatically.

When this option is selected, users will be assigned a Learning Path based on their chosen core technology during their first login. Users can select their core technology on the onboarding screens. They will then be assigned an initial Learning Path designed to establish a baseline for their training metrics across common vulnerability categories found in that category.

It’s also possible to assign a specific Learning Path to each technology. To do this, select the technology and then choose your preferred Learning Path from the table on the right.

Custom learning paths can also be created and will appear within the learning path table on the right. These can then be assigned for a particular technology or for tags as well.

Refer to this article on how to create a Custom Learning Path

Step 4: Once the selections have been made, click on the Save button.

Assign Learning Paths By Tag

Admins can assign activities to users based on tags for generic training.

Step 1: In Activities, select the Learning Paths radio button.

Step 2: In Assign, select the Tag radio button.

Step 3: Click the Choose button by the desired tag to display all Learning Paths, then click on Select to add your preferred Learning Path for each defined tag.

If you have users who have not been assigned any tags, you can pull up the list by clicking on the link within the Warning Message. After that, you can define tags for those users.

Step 4: Once the selections have been made, click on the Save button.

Assign Labs

When selecting the Labs option, the Adaptive Training algorithm will automatically choose Labs for each participant based on the security topics and vulnerability categories in which they have the lowest competency scores.

We recommend assigning between three and five Labs per iteration, and these iterations can be shorter, lasting 30 to 45 days.

We also suggest allocating Labs through Adaptive Training only after completing one or two iterations of Learning Paths. This will help users increase their overall competency score by providing focused training in the areas where they need it the most.

Step 1: In Activities, select the Labs radio button.

Step 2: In Assign, the Adaptive radio button is automatically selected.

Step 3: Type the number of Labs in the input field (recommended between 3-5 labs).

Step 4: Once the selections have been made, click on the Save button. 

Note: The algorithm will automatically assign Labs to each participant based on the security topics in which they have lower competency metrics.

Adding a Label to a Training Iteration

If necessary, you can assign a name to your training iteration. When creating a new iteration, simply enter your desired name in the Label textbox. This helps you easily identify and manage different iterations. 

Re-Assign a Training Iteration

You can re-assign expired activities by selecting the Re-Assign If Expired toggle. Users will be re-assigned training activities included in this Iteration, which have been completed in the past but have now expired.

Reset Previously Completed Activities

If you would like to have an iteration where users redo previously completed activities, you must create them as a separate iteration and set the Reset Previous Progress option to reset.

Inclusions/Exclusions

If you would like to include or exclude any specific group of users, you can utilize the inclusions/exclusions options. The three options available are as follows:

1. Exclude Users with any of these Tags
2. Exclude Users in any of these Teams
3. Only Include Users in these Teams

Update a Training Iteration

You can edit, pause, or delete the iteration if necessary. When editing a training iteration, you can select the Replace Assignments toggle. If selected, any incomplete activities assigned to users will be updated with the revised selections. If not selected, changes will only apply to new users.

Note: This option will be visible only when you are editing a training iteration.

Activate/Deactivate a Training Iteration

You can toggle it between active and inactive by clicking on the Not Active/Active toggle.

Additional Help

If you require additional help in setting up a training plan, please reach out to your Customer Success Manager or to the Customer Success Team via success@secureflag.com to help create a plan tailored to your learning objectives.

• Related Articles

• Assign Activities

  The platform offers multiple options to assign activities such as labs or learning paths, to individual users, groups, teams, or the entire organization. By following these steps, you can create customized training plans that address learners' ...

• Track Assigned Activities

  Once a user has been assigned an activity, the progress of the activity can be tracked on an Organization, Team, or User level. Also, progress made by each user for a selected learning path can also be tracked. For Organization or Team For User By ...

• Threat Modeling SDK

  This feature is available exclusively on the Enterprise Plans. Learn more. This guide will walk you through using the Threat Model Software Development Kit (SDK), an innovative tool that enables you to build Threat Model labs that are both unique to ...

• Email Notifications

  The platform will periodically send email notifications. Since training priorities range from customer to customer and fluctuate over subscription periods, we have enabled a configuration option to ensure our customers maintain complete control over ...

• Users

  The platform offers multiple user roles with varying levels of privilege to help you run an efficient, secure coding training program. User Role Run Labs Run Learning Paths Create Learning Paths Create Labs Add Remove Update Users Create Tournaments ...