How to Export Proof of Security Awareness Training for Audits and Security Assessments

If your organization needs to provide evidence that users are enrolled in and actively receiving Security Awareness Training, Nimblr makes this easy. 

A practical and reliable way to document this is to export the Users report from your Nimblr portal. The exported file gives you a clear overview of the users included in your awareness program and includes relevant training data such as user status, activity, completed courses, and other awareness related information. 

This report can be used as supporting documentation during: 

• External audits 

• Security assessments 

• NIS2 related reviews 

• ISO 27001 or similar certification work 

• Internal compliance follow ups 

For many organizations, this export serves as a useful and professional record to show that Security Awareness Training is in place and that users are participating in the program. 

How to export the report: 

• Sign in to your Nimblr Admin Portal at nimblr.net. 

• Go to Reports. 

• Select Users. 

• Click Export. 

Choose either: 

• Export as Excel 

• Export as CSV 

Once the export is complete, you will receive a file containing your current user data from the awareness program. 

What the report shows:

The exported Users report provides a broad overview of your users and their training participation. 

Depending on your setup, the file can include information such as: 

• User name and email address 

• Group or department 

• User status 

• When the user started in the program 

• Last activity 

• Number of completed courses 

• Awareness level 

• Awareness status 

• Sent and clicked simulations 

This makes the report well suited as evidence when an auditor, assessor, customer, or internal stakeholder wants to verify that your organization is running an active Security Awareness Training program. 

Why this works well as audit evidence:

When auditors or assessors request proof of Security Awareness Training, they usually want documentation that shows your organization has an established process and that users are actually included in it. 

The Nimblr Users export helps provide this by showing: 

• Which users are part of the program 

• That users are active 

• That training activity is being tracked 

• That course completion and awareness related metrics are available in a structured format 

Because the report is exported directly from your Nimblr portal, it provides a simple and credible snapshot of your awareness program at the time of export. 

Our recommendation:

If you are preparing for an audit, certification process, or security review, we recommend exporting the Users report directly from Nimblr and saving it as supporting documentation. 

For best results: 

• Export the file close to the date of the audit or assessment 

• Prefer Excel if you want a format that is easier to review and share internally 

• Keep the exported file together with your other compliance or audit documentation 

• If needed, combine the report with your internal policies or security governance documents to provide additional context 

Good to know:

The Users export is often sufficient as proof that your organization delivers Security Awareness Training to its users. If an auditor asks for additional context, the report can also help support discussions around participation, activity, and training coverage across the organization. 

If you need a point in time record for a formal review, simply export a fresh report from the portal and provide it as part of your audit material. 

If you have any further questions, feedback or requests just reach out to us at:                                                    support@nimblrsecurity.com
                                                                   Or
                                                        Submit a Ticket