Features
Training and awareness
Your team learns in the portal what it needs for your frameworks, and you have the evidence for the audit in one place.
Under NIS2, management has to take part in training regularly, and in the audit what counts is the evidence of who completed which training and when.
How Complass helps
Learning blocks per role and framework
Learning blocks on how to use the portal per role and specialist training on your booked frameworks, for example NIS2 (also for management), ISO 27001, the CRA, IEC 62443 and the Machinery Regulation. Plus the basics of data protection and AI literacy.
Practice company instead of real data
Exercises in your own practice company with sample data, never in your real data.
Final test and certificate
Final test and certificate of participation as PDF; it can be one building block of your training record.
Assignment without scores
Administrators assign learning blocks to people or departments and see the status, without individual people’s scores.
Training record for audits
Who needs which mandatory training and who has completed it, with completion rate and expiring evidence. You add your own classroom, online or external training. Export as PDF or Excel and filing as evidence in the project.
Reminder before expiry
When a mandatory training is about to expire, Complass reminds the person in good time; the training managers receive a weekly summary.
Basic courses for OT and development
Two basic courses with exercises: “Working securely on machines and plants” for production staff and “Secure development” for software teams.
Management training
With the management cockpit you record management training with provider, date, duration, contents and certificate of attendance, as recommended in the BSI guidance.
Academy and awareness
Write your own learning blocks for your company, for example house rules or summaries of your policies, with an optional quiz. You assign them to everybody, a role, a department or the management; completions count in the training record, and each person downloads their confirmation of participation as a PDF. The package is included in Professional and Premium and can be added to Start and Business; the Complass training above is independent of it and included in every subscription.
Legal and normative basis
- § 38 Abs. 3 BSIG§ 38 BSIG Umsetzungs-, Überwachungs- und Schulungspflicht für Geschäftsleitungen besonders wichtiger Einrichtungen und wichtiger Einrichtungen(1) Geschäftsleitungen besonders wichtiger Einrichtungen und wichtiger Einrichtungen sind verpflichtet, die von diesen Einrichtungen nach § 30 zu ergreifenden Risikomanagementmaßnahmen umzusetzen und ihre Umsetzung zu überwachen. (2) Geschäftsleitungen, die ihre Pflichten nach Absatz 1 verletzen, haften ihrer Einrichtung für einen schuldhaft verursachten Schaden nach den auf die Rechtsform der Einrichtung …Open original (gesetze-im-internet.de) ↗
- § 30 Abs. 2 Nr. 7 BSIG§ 30 BSIG Risikomanagementmaßnahmen besonders wichtiger Einrichtungen und wichtiger Einrichtungen(1) Besonders wichtige Einrichtungen und wichtige Einrichtungen sind verpflichtet, geeignete, verhältnismäßige und wirksame technische und organisatorische Maßnahmen, die in Absatz 2 konkretisiert werden, zu ergreifen, um Störungen der Verfügbarkeit, Integrität und Vertraulichkeit der informationstechnischen Systeme, Komponenten und Prozesse, die sie für die Erbringung ihrer Dienste nutzen, zu vermeiden und …Open original (gesetze-im-internet.de) ↗
- Art. 20 Abs. 2 NIS2-RichtlinieArticle 20 NIS 2 Directive Governance1. Member States shall ensure that the management bodies of essential and important entities approve the cybersecurity risk-management measures taken by those entities in order to comply with Article 21, oversee its implementation and can be held liable for infringements by the entities of that Article. The application of this paragraph shall be without prejudice to national law as regards the liability rules …Open original (EUR-Lex) ↗
- Art. 4 KI-VOArticle 4 AI Act AI literacy1. Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or groups of persons on whom the AI systems are to be …Open original (EUR-Lex – consolidated version of 27.07.2026) ↗
- ISO/IEC 27001:2022, 7.2, 7.3 und A.6.3
This page describes Complass features and is not legal advice.
Frequently asked questions
Is the training included in the subscription?
Yes. The Complass training is included in every subscription; which specialist training you see depends on your booked frameworks. During the trial you see a preview.
Does the certificate fulfil the management’s training obligation?
It can be one building block of your evidence. Whether scope and content are sufficient is for you to assess; the BSI guidance on management training provides orientation.
Can we also record our own training?
Yes. You record classroom, online or external training with target group, repetition, participants and evidence file. It appears in the training record next to the Complass training.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.