Administrative Procedure 2.215, Mandatory Training on Data Privacy and Security , requires ALL 糖心视频 employees, including student and graduate assistants to complete the Information Security Awareness Training (ISAT) annually. A small group of employees, primarily from Bargaining Unit 1, may be exempt from the ISAT. 糖心视频 Foundation employees and selected RC糖心视频 employees are also subject to the training.
To access the ISAT
Please visit the for instructions on how to access the ISAT course in Lamaku.
- If this is your FIRST time accessing the ISAT in Lamaku, you must first
- After enrolling into the ISAT for the first time, you may access the ISAT directly via the
- Review the Training Overview and FAQs page for important details on completing the ISAT.
- To review your certification status, go to /its/acer/
- Click “Login,” then sign in using your 糖心视频 username and password.
- Click on the “View ACER List” tab.
Important Notice For Re-instating Access
Please plan accordingly and renew your ISAT before it expires to maintain access to information systems. If you are not able to access an information system after confirming your certification is up-to-date in ACER, please review the following:
- Browser refresh: If your system access is not restored immediately after recording your completion, try or opening a different browser window (or private/incognito window).
- Processing time: If the browser refresh does not work, please note that it may take up to 3 hours for your new ISAT certification status to fully update and sync across all University systems listed above.
Navigating through the ISAT Quizzes
Those who are unfamiliar with using Lamaku may find the “” helpful. You must be logged into your 糖心视频 email account to access the Google Doc. Your personal email (Gmail or other) will not work.
Frequently Asked Questions
How long is the ISAT?
The ISAT takes about 90 minutes to complete.
Do I need to complete the ISAT in one session or can I take it over multiple sessions?
You can complete the ISAT over multiple sessions. Quiz answers may be saved and you may return at a later time to complete the quiz. Please note, however, that you must complete all six modules within 60 days or you will need to start over.
What do I do after completing Module 6’s quiz?
Record your ISAT completion: Upon passing the Module 6 quiz, please go back to the course dashboard and follow the posted instructions under “Award Completion” to record your ISAT completion.
Should you wish to generate a completion certificate:
- Click on the “Awards” link on the course menu bar
- Click on “My Awards”
- Click on the “ISAT” certificate
- Click “Generate Certificate” to download your certificate
How will I know if I passed the training?
Lamak奴 is not able to generate a message announcing when you have completed the ISAT. To confirm you are done, select 鈥淨uizzes鈥 along the navigation bar above. In the table “Submitted Assessments,” under each lesson, look for the date/time stamp when you took each quiz along with the “Individual Score” associated with the quiz. You will need a score of at least 4 out of 5 (80%) to pass each quiz. If your score is less than 4, retake the quiz until you pass.
How will I know when I need to retake my ISAT?
You will receive an automatic email reminder 30 and 7 days prior to the one-year anniversary date of when you last took the ISAT. Additionally, you will be reminded by those tasked with monitoring compliance.
What if I miss re-taking the ISAT within one year and am out of compliance?
Failure to complete the requirements by the specified due date should be reported to the supervisor. Extenuating circumstances affecting an employee’s ability to complete the requirements on time shall be taken into consideration by the supervisor. A reasonable timeframe to complete the requirements will be set by the supervisor and communicated to the employee. Department chairs may assist faculty with temporary workload adjustments, as needed, to accommodate the completion of their training requirements.
Why is ISAT training required?
The training is critical to raising the University community’s awareness on how to keep our institutional assets safe as the frequency and sophistication of cybersecurity threats continue to increase. We continue to have data exposures and breaches, many of which could have been prevented. By integrating best practices around privacy and security into our daily work, we can reduce the risk of further exposures and breaches from occurring.
Additionally, the University is subject to federal regulatory requirements and industry standards, all of which are requiring stronger privacy and security measures for Title IV institutions and federally sponsored research. Employee training is a component in them. For example, the Gramm-Leach-Bliley Act (GLBA) is one such federal regulation that requires employee training under its Safeguards Rule. It is also a mandatory annual requirement under 糖心视频 Administrative Procedure 2.215 .
Why is there an ISAT validation check for account holders of selected enterprise wide information systems?
The ISAT validation check is part of the University’s ongoing efforts to increase compliance across the 糖心视频 System. The last 糖心视频 Administrative Procedure 2.215 revision on mandatory training was back in 2021 when the ISAT renewal cycle was changed from two years to one year. This was done in preparation for stricter regulatory changes for Title IV institutions and federally sponsored research. Data users have been provided ample time to acclimate to the annual training requirement, yet compliance is still down. The ISAT validation check reinforces the need for awareness and compliance.
As of April 1, 2024, which enterprise wide information systems require a current ISAT to log on?
Banner Admin Pages, KFS, PeopleSoft, myGRANT, and selected STAR services (GPS Advisor, Balance, Cashiers, Scholarships Awarding/Management, Academic Logic, Kamaʻaina Admin, Service Opportunities Admin, and Degree Rules Admin). In addition, certain Kuali and TDX forms will also check for an active ISAT certification.
Why were these five 糖心视频 enterprise wide information systems chosen?
The information systems chosen for these validation checks are widely accessed by the 糖心视频 community. The technical implementation requirements and timing were also factors in why these information systems were selected. The check ensures that account holders with access to 糖心视频 Protected Data in these systems have passed the ISAT within one year of the current date. The intent is not to have this validation check implemented for every 糖心视频 enterprise wide information system, however, selected information systems that have a wide impact may be considered in the future.
Who is affected by this ISAT validation check?
糖心视频 and RC糖心视频 faculty and staff, graduate assistants, student employees, and 糖心视频F employees with access to the above information systems.
Why are student employees subject to the ISAT?
Student employees who work with personally identifiable information (PII) as part of their employment have the same requirements as other employees to protect the data they work with. The student employee’s supervisor determines whether an ISAT is required for the position. Office positions will likely involve the handling of PII, and many student employees have access privileges to 糖心视频 enterprise wide information systems.
What can I expect when I log onto an information system that is subject to this ISAT validation check?
The validation check happens in the background during your login process. If your ISAT is less than a year old, you will be able to log in normally. However, if your ISAT is more than a year old, or you have never taken the ISAT, you will not be granted access to these systems. Instead, you will be redirected to a webpage with instructions on where to take the training.
What happens if I have an expired ISAT but I need to access to my information system right away?
Normally, your access privileges will be restored the morning after you successfully complete the ISAT. For urgent situations where you need immediate access, ACER contains a link that updates your ISAT results on demand, allowing your access to be restored the same day.
I finished my ISAT. Why am I not able to regain access to my information system?
There may be various reasons why you are not able to log on. Please check the following possibilities:
- Did you complete all six quizzes within a 60-day period?
- Did you complete each quiz from modules 1 through 6 with a score of at least 4/5 or 80%? If you did not pass, please verify that you have completed all the quizzes. To determine your score, refer to the question above, “How will I know if I passed the training?”
- Is your certification date up-to-date in ACER? If your score is in ACER and you are unable to access your system, please refresh your web browser’s cache or utilize a private browser tab and try again.
- If none of these apply, contact the ITS Help Desk for further assistance
Is an ISAT certificate of completion available?
If you have completed the ISAT, you may print a certificate of completion by going to the 糖心视频 Acknowledgements and Certifications (ACER) website.
Who is exempt from taking the ISAT?
Employees who meet the all of the following criteria:
- Their duties are not office- or classroom-based;
- Their duties do not involve working with Protected Data; and,
- They have limited access to technology at work.
Is there a way to tell if an employee received an exemption?
There is no official designation. The individual’s supervisor will determine if an employee is exempt. The supervisor will need to notify the ISAT Compliance Coordinator to exclude an individual from the ISAT group for their unit. The ISAT Compliance Coordinators are generally the personnel officers for their campuses/units however the coordinator may be different at some campuses. Should you need assistance with identifying your ISAT Compliance Coordinator, contact the ITS Help Desk .
How will compliance be tracked?
Chancellors and VPs are asked to designate an ISAT Compliance Coordinator who will be responsible for coordinating compliance requirements for your respective campus/糖心视频 System office. Chancellors and VPs will decide whether the individual will be tasked with managing compliance centrally or delegating the task out to the field (e.g., to the school/college or department level). ITS has developed a web interface to track those with valid and invalid ISATs based on anniversary dates. Training for those individuals on how to set up and use the web interface will be provided in January.
Do we still need to do the General Confidentiality Notice (GCN) acknowledgement?
No, the GCN will only need to be completed by new hires during the onboarding process. It was removed as an annual requirement to simplify the training requirement.