IT Security Awareness Training is a video-based training about online safety and security that takes about 30 minutes to complete. All George Mason University employees are required to complete annual training as part of Mason's IT Security Standards. It is assigned to employees through MasonLEAPS. The training is designed to equip and empower employees with information to help protect Mason's IT systems, data, and employee information.

You must complete IT Security Awareness Training because all employees are required to take it. You must complete the training to help Mason meet important industry standards and regulatory compliance requirements. The requirements are part of Information Technology Services Standard Section 3.2.1. The IT Security Awareness Training is designed to improve employees' knowledge about computer security issues.

The training is available through MasonLEAPS. Log in via masonleaps.gmu.edu.

The IT Security Awareness video-based training will take about 30 minutes. Personnel in specific roles and functions in technology or those who handle Highly Sensitive Data may be required to take additional role-based training. You can view modules in the ITSAT Curriculum here.

All active employees will be assigned training automatically. Beginning 2024, the training deadline is individual and unique to each user depending on the last time they completed the training AND their semi-annual Patriot Pass reset date. Due dates for each training are listed and visible in MasonLeaps under ‘Your Action Items’ and ‘View transcript’. The training must be completed annually, so during one of the semi-annual resets, the system will verify if the training was completed before the due date and if not will reset for only 14 days. You must complete the assigned mandatory security awareness training(s) within this 14-day window, failing which the account will be locked.

The IT Security Awareness Training is assigned to employees through MasonLEAPS. Login via masonleaps.gmu.edu using your NetID and Patriot Pass Password. Select IT Security Awareness Training in the Your Action Items box to the right.

Please ensure that you are using a supported browser. MasonLEAPS currently supports the following:

• Microsoft Edge for Windows 10 (Microsoft Edge Chromium)
  • Note: MasonLEAPS does not support the use of IE Mode.
  • As of the July ’21 Release, Cornerstone no longer supports Microsoft Edge Legacy and Internet Explorer 11 browsers.
• Latest stable browser version of Apple Safari
• Latest stable browser version of Mozilla Firefox
• Latest stable browser version of Google Chrome

After an employee completes IT Security Awareness Training, it is recorded on their MasonLEAPS transcript. It provides the employee and their supervisor or manager with a record that the compliance-based training has been completed.

Failure to complete any section of the annual security awareness training assigned to a user’s account could impact the user’s ability to reset their Patriot Pass Password. In those cases, users would be permitted to reset their password for 14 days, during which time they must complete their outstanding training(s). If they do not, their account will be locked out for non-compliance.

Users with disabled accounts must contact ITS Support to have their accounts re-enabled to complete the training and will require their manager to submit a written commitment that the training will be completed. Persistent non-compliance will be escalated to IT Risk and Compliance Office and the user’s senior leadership.

If you have problems or issues accessing or taking the training, contact ITS Support at 703-993-8870 or Live Chat.

If you have trouble, contact ITS Support at 703-993-8870 or [email protected]. A support specialist will assist you.

If you are assigned Role-Based Technical training in LinkedIn Learning, you must select a new module to complete this year. LinkedIn Learning will not give credit for retaking a module already completed. You must choose a new module to meet the requirement and receive credit.

If you were assigned IT Security Awareness Training but are no longer employed at Mason or have a new role, you should notify Information Technology Services of the change.

Contact ITS Support via Request Help, [email protected], or 703-993-8870 to report the change. Please include details, such as your departure date, employment change, or role change.

As a new hire, you will be assigned New Employee Security Awareness Training to complete within 14 days. The training covers general IT Security awareness. If you or your supervisor want to request additional training, such as Highly Sensitive Data Custodian training, contact ITS Support via Request Help, Live Chat, or 703-993-8870.

To complete your IT Security Awareness Training:

1. Log in via masonleaps.gmu.edu using your NetID and Patriot Pass Password.
2. Select IT Security Awareness Training from the Your Action Items box.
3. Select the ITS Security Awareness Training to launch it.

What IT Security Awareness Training am I required to complete?

The training you are required to complete depends on your role and function at Mason.

All employees, including contractors, affiliates, and student wage workers, must complete the General IT Security Awareness Training. A list of optional training modules tied to specific regulatory or industry requirements (HIPAA, FERPA, ITAR, CUI, etc.) is also available. Please review this list of optional training videos and complete the training applicable to your role and job at Mason.

Mason employees who handle technical responsibilities at the university, such as system administrators, database administrators, Active Directory administrators, HRIS, Finance, Business Intelligence, etc., will have role-based training to complete. Your account will have options from LinkedIn Learning for training related to your job. You are required to select one of the options. LinkedIn Learning does not give credit for retaking a module already completed. The length of your training will depend on your selection.

Mason employees who handle Highly Sensitive Data in Banner or associated applications, will be assigned Role-Based Highly Sensitive Data Custodian Training.

If your account is temporarily deactivated for not completing prior mandatory training, contact ITS Support at 703-993-8870 or Live Chat. A support specialist will be able to assist you in reactivating your account so you can regain access and complete the mandatory training.

 Contact ITS Support at 703-993-8870 or Live Chat. A support specialist will assist you in determining why you are unable to access the training.