ObjectStackTraining
Training protocol schemas
Information Security Training Protocol — ISO 27001:2022 (A.6.3)
Defines schemas for security awareness and training management including course definitions, completion tracking, and organizational training plans.
See also: https://www.iso.org/standard/27001
@category Security
Source: packages/spec/src/system/training.zod.ts
TypeScript Usage
import { TrainingCategorySchema, TrainingCompletionStatusSchema, TrainingCourseSchema, TrainingPlanSchema, TrainingRecordSchema } from '@objectstack/spec/system';
import type { TrainingCategory, TrainingCompletionStatus, TrainingCourse, TrainingPlan, TrainingRecord } from '@objectstack/spec/system';
// Validate data
const result = TrainingCategorySchema.parse(data);TrainingCategory
Allowed Values
security_awarenessdata_protectionincident_responseaccess_controlphishing_awarenesscompliancesecure_developmentphysical_securitybusiness_continuityother
TrainingCompletionStatus
Allowed Values
not_startedin_progresscompletedfailedexpired
TrainingCourse
Security training course definition
Properties
| Property | Type | Required | Description |
|---|---|---|---|
| id | string | ✅ | Unique course identifier |
| title | string | ✅ | Course title |
| description | string | ✅ | Course description and learning objectives |
| category | Enum<'security_awareness' | 'data_protection' | 'incident_response' | 'access_control' | 'phishing_awareness' | 'compliance' | 'secure_development' | … +3 more> | ✅ | Training category |
| durationMinutes | number | ✅ | Estimated course duration in minutes |
| mandatory | boolean | optional (default: false) | Whether training is mandatory |
| targetRoles | string[] | ✅ | Target roles or groups |
| validityDays | number | optional | Certification validity period in days |
| passingScore | number | optional | Minimum passing score percentage |
| version | string | optional | Course content version |
Allowed Values: TrainingCourse.category
security_awarenessdata_protectionincident_responseaccess_controlphishing_awarenesscompliancesecure_developmentphysical_securitybusiness_continuityother
TrainingPlan
Organizational training plan per ISO 27001:2022 A.6.3
Properties
| Property | Type | Required | Description |
|---|---|---|---|
| enabled | boolean | optional (default: true) | Enable training management |
| courses | { id: string; title: string; description: string; category: Enum<'security_awareness' | 'data_protection' | 'incident_response' | …>; … }[] | ✅ | Training courses |
| recertificationIntervalDays | number | optional (default: 365) | Default recertification interval in days |
| trackCompletion | boolean | optional (default: true) | Track training completion for compliance |
| gracePeriodDays | number | optional (default: 30) | Grace period in days after certification expiry |
| sendReminders | boolean | optional (default: true) | Send reminders for upcoming training deadlines |
| reminderDaysBefore | number | optional (default: 14) | Days before deadline to send first reminder |
Nested Shape: TrainingPlan.courses[number]
Security training course definition
| Property | Type | Required | Description |
|---|---|---|---|
| id | string | ✅ | Unique course identifier |
| title | string | ✅ | Course title |
| description | string | ✅ | Course description and learning objectives |
| category | Enum<'security_awareness' | 'data_protection' | 'incident_response' | …> | ✅ | Training category |
| durationMinutes | number | ✅ | Estimated course duration in minutes |
| mandatory | boolean | optional (default: false) | Whether training is mandatory |
| targetRoles | string[] | ✅ | Target roles or groups |
| validityDays | number | optional | Certification validity period in days |
| passingScore | number | optional | Minimum passing score percentage |
| version | string | optional | Course content version |
TrainingRecord
Individual training completion record
Properties
| Property | Type | Required | Description |
|---|---|---|---|
| courseId | string | ✅ | Training course identifier |
| userId | string | ✅ | User identifier |
| status | Enum<'not_started' | 'in_progress' | 'completed' | 'failed' | 'expired'> | ✅ | Training completion status |
| assignedAt | number | ✅ | Assignment timestamp |
| completedAt | number | optional | Completion timestamp |
| score | number | optional | Assessment score percentage |
| expiresAt | number | optional | Certification expiry timestamp |
| notes | string | optional | Training notes or comments |