Compliance Training Quiz Template
Five workplace-security scenarios with a real pass line — employees either clear four of five or are sent back to review, on the record.
Five scenarios from the security awareness training. The pass line is 4 of 5, your attempt is recorded for the training register, and the retake costs nothing but pride.
Compliance training has a documentation problem: the training happened, but can you prove anyone absorbed it? An auditor does not want your slide deck — they want a register showing who was assessed, when, on what, and whether they passed. This quiz produces that register as a side effect of being taken. Five scenarios, an automatic 4-of-5 pass line, identity captured up front, and every attempt timestamped in your responses view.
How the pass line works. Each scenario adds a point to the score variable when the compliant answer is chosen, and two rules split the outcome: 4 or 5 reaches the Passed ending, 3 or fewer lands on Review and Retake. Both endings state the score and what it means — no ambiguity for the employee, no interpretation left to whoever reads the register later. Adjusting the pass line is one number in the Logic panel.
Why scenarios instead of definitions. "What is phishing?" tests vocabulary; the gift-card CEO email tests behavior, which is the thing that actually gets companies breached. Each distractor here is a documented incident pattern: replying to the phishing email for confirmation, plugging in the found USB to identify its owner, the polite tailgate, the password shared with a colleague and rotated after. If an employee picks the plausible-but-wrong option on this quiz, better here than in the parking lot.
What we left out. Trick questions and near-identical answer pairs — a compliance check must be passable by anyone who genuinely absorbed the training, or the retake queue becomes a grievance queue. Long banks of twenty questions, too: five sharply chosen scenarios measure the same thing with far less resentment, and resentment is the enemy of security culture.
Who uses this. HR and IT teams running annual security awareness cycles, startups building their first SOC 2 or ISO evidence trail, compliance officers who need completion records by named employee, and managers onboarding new hires into regulated workflows.
Make it yours. Replace the scenarios with the risks from your own incident history and policy — data handling, expense rules, safety procedures — keeping one clearly compliant answer per question, then re-key the five scoring rules in the Logic panel. Password-protect the form so the register only contains your staff, and set the close date to your training deadline. The CSV export, filtered to passes, is the completion evidence; the name and employee ID columns make reconciliation against your HR roster a five-minute job. Failed attempts stay in the register too — that is a feature, because "reviewed and retook it" is exactly the paper trail an auditor likes to see.
Frequently asked questions
Does a failed attempt block the retake?
No — the retake ending sends people back to the material and they can submit again. Every attempt is stored with its timestamp, so the register shows the full path to passing.
How do I produce completion evidence for an audit?
Export the CSV: each row carries the name, employee ID, per-question answers, computed score, and submission time. Filter on passing scores and you have the register.
Can I keep non-employees out of the quiz?
Enable password protection in Settings and share the password through your internal channel — only staff with it can open the form.
Can I change the pass threshold?
Yes — the pass and retake rules in the Logic panel compare the score against a number. Raise it to 5 for zero-tolerance topics or lower it if you extend the quiz.
How do I enforce a training deadline?
Set a close date in Settings; the form stops accepting attempts after it. Anyone missing from the CSV at close is your follow-up list.