initial training

A mandatory, foundational program of security and privacy instruction that an organization delivers to personnel at the point of onboarding or before access to systems is granted, establishing baseline awareness of policies, risks, and responsibilities before any ongoing or periodic refresher training begins. It is distinguished from recurring annual or ad hoc training by its timing—it is a prerequisite condition for system access—and by its comprehensive scope, covering the full range of applicable security and privacy obligations rather than incremental or topical updates. Across the field, it anchors a two-phase training lifecycle: the initial delivery sets the baseline, and subsequent periodic cycles (annual, event-triggered, or role-change-triggered) build upon it.