It's crazy that every MCCP (MSSP) are all reselling the same 3 products: Sentinel 1, CrowdStrike (yes I know neither are training), and then they all resell KnowBe4 as the training platform. Our situation, and I don't know about others but 30% of our staff has/uses a computer. The rest of them are using CNCs. I just don't think KnowBe4 is a solution that will work. Also, it doesn't seem to be a good solution because it's centered around phishing email campaigns which is great but also not anywhere in the NIST 800-171 controls.

I talked to Guardey which seems like a good solution however their approach is highly device required as it is built around micro-training and gamified training using things like leaderboards to try to create a competitive atmosphere around training. I don't think that it is feasible to have the machine operators to step away many times and constantly to take training, not to mention I don't have a training room with PCs to use.

I think even a self hosted Moodle install would work better because you have the ability to create trainings that can be taken on a computer but then also you can schedule in person classes.

Just curious as to what people are using.