Is notarization required?

Not typically. Employee training acknowledgements are usually internal HR records and do not require notarization; however, some states or agency-specific programs may demand notarized attestations for certain certifications or sensitive roles.

Can employees e-sign the form?

Yes. Under ESIGN and UETA, electronic signatures are legally valid when intent and consent are present and the record can be retained. Use an eSignature provider that captures an audit trail and provides reliable signer attribution.

How long should we keep signed forms?

Retention varies by industry. Retain during employment plus at least three years, extend to six years for HIPAA-related records, and follow any longer state or regulator-specific obligations.

What if an employee refuses to sign?

Document the refusal and the circumstances, consider alternate acknowledgement methods, and follow company disciplinary or compliance procedures to address non-compliance.

Are e-signed forms admissible?

Yes. Electronic signatures are admissible under the ESIGN Act and UETA when the four validity factors are present: intent, consent, attribution, and reliable retention of the record.

How do we correct errors on a signed form?

Do not alter the signed copy. Instead, create a corrected form or an amendment, have the employee re-sign, and retain both the original and the corrected records with clear notes explaining the change.

Electronic Signature
Templates
HR
Employee Security Awareness Form

Employee Security Awareness Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Employee Security Awareness Form

Employee Information

Full Name:

Home Address Contact

Position Information

Job Title Department Reporting Manager

Start Date: Salary / Pay Rate:

Security Training Record

I confirm completion of the following security awareness training modules (check all that apply):

Password Security and MFA Phishing & Social Engineering Data Classification & Protection

Device and Endpoint Security Secure Remote Work Practices Incident Reporting Procedures

Training Date Instructor / Trainer

Security Policies & Employee Obligations

I acknowledge that I have received, read and understand the organization's security policies and agree to comply with them. I understand that compliance is a condition of employment and that violations may result in disciplinary action up to and including termination.

Confidential Information: I will not access, use, disclose, or remove proprietary, personal, or confidential information except as required to perform my assigned duties. I will safeguard all sensitive information, including personal data, financial records, trade secrets, and security credentials.

Access & Passwords: I will use unique, complex passwords, enable multi-factor authentication where required, and will not share my credentials. I will report compromised credentials immediately.

Acceptable Use: I will use company IT resources only for authorized business purposes and will not install unauthorized software or connect unapproved devices to the corporate network.

Device & Remote Work Security: I will follow device encryption, patching, and approved remote access procedures. Personal devices used for work must meet minimum security standards and be approved by IT.

Social Engineering & Reporting: I will be vigilant against social engineering attempts. I will report suspected security incidents, suspicious messages, or lost/stolen devices immediately to the designated security contact.

Incident Reporting & Monitoring Consent

I understand that the organization monitors access to and use of its information systems to detect, investigate, and remediate security incidents. Such monitoring may include but is not limited to log analysis, email scanning for malicious content, and device telemetry. I consent to such monitoring to the extent permitted by law.

I will report security incidents immediately to the security team or my manager. In the event of an incident, I will cooperate with any investigation and preservation of evidence.

Acknowledgement of Monitoring: I acknowledge and consent to authorized monitoring described above.

Employment History

Employer 1 — Company Name

Title: From: To:

Responsibilities Reason for Leaving Employer 2 — Company Name

Title: From: To:

Responsibilities Reason for Leaving

Education

Highest Degree Institution Graduation Date

References

Reference 1 Reference 2 Reference 3

Legal Disclosures & Authorizations

At-Will Employment: I understand that, except where prohibited by law or by a written agreement signed by an authorized representative, my employment is at-will and may be terminated by either party at any time, with or without cause.

Equal Opportunity: The organization provides equal employment opportunity without regard to protected characteristics and will take reasonable steps to prevent discrimination and harassment.

Authorization to Contact and Background Check: I authorize the organization and its agents to verify any information provided on this form and to contact previous employers, references, and educational institutions for the purpose of obtaining employment-related information. I further authorize the organization to obtain background check information and security clearance information as required by job duties and applicable law.

Consent to Background Check: I consent to the release of records and information for employment screening purposes as described above.

Employee Certification

I certify that all information provided on this form is true and complete to the best of my knowledge. I understand that falsification, omission, or failure to disclose requested information may be grounds for discipline or termination. I acknowledge my continuing obligation to report changes that affect my access to sensitive information or my compliance with security policies.

Additional Comments

Employee Name:

Signature:

Date:

What the Employee Security Awareness Form Is and when it's used

The Employee Security Awareness Form documents an employee's completion of information security training and acknowledgement of company policies. It typically records the training date, topic areas (phishing, password hygiene, data handling, device security), the employee's printed name, and signature or e-signature. Employers use the form to demonstrate compliance with internal security programs and, where applicable, external regulations such as HIPAA for healthcare records or industry-specific controls. The form also serves as a record for HR, IT, and security teams to track training cadence and remedial actions.

Why keeping a formal awareness record matters

A formal Employee Security Awareness Form provides an auditable record that employees received training, acknowledges policy acceptance, and supports disciplinary and compliance processes with clear documentation. It reduces ambiguity about who received what instruction and when.

Who typically completes and retains this form

Organizations across HR, IT security, and compliance teams use this form to document employee training and acknowledgements.

Human resources and compliance teams managing personnel records and audit trails.
IT and security staff delivering or tracking security training results and remediation.
Individual employees who complete the training and sign to acknowledge policy receipt.

Retain signed forms with personnel records to verify training histories during audits, incident reviews, or regulatory inquiries.

Primary signers and approvers

HR Manager

The HR Manager prepares and files the form in the employee record, confirms training completion, and coordinates remedial training. HR ensures retention meets company policy and applicable regulatory requirements and provides copies for audits or investigations.

Employee

The employee acknowledges participation and understanding by signing or e-signing the form and noting the training date. The signature documents consent to follow policies and serves as evidence for performance and compliance reviews.

Essential data fields to include

Employee name: Full legal name

Employee ID: Company identifier

Department: Organizational unit

Training date: MM/DD/YYYY

Topics covered: Phishing, passwords, data handling

Signature: Handwritten or e-signature

Filling out the form step by step

Follow these simple steps to complete and file the Employee Security Awareness Form accurately.

01

Enter identity: Type the employee's full legal name and company ID.
02

Record training: Enter the training title and use MM/DD/YYYY for the date.
03

List topics: Select or write core topics covered during the session.
04

Sign and save: Employee signs; store signed copy in personnel file.

Typical form workflow from training to recordkeeping

A common workflow connects training delivery, employee acknowledgement, and secure archival for audit readiness.

Deliver training: Session conducted in person or via LMS.
Complete form: Employee fills and signs the form.
Review: HR or security verifies completion.
Archive: Save signed record in HR system or secure repository.

Technical considerations for digital completion and storage

Decide whether you will use paper, scanned records, or an eSignature platform for completion and retention.

File formats: PDF and DOCX supported for archiving
Authentication: Email, SMS, or stronger MFA options
Integrations: Connects with HRIS and cloud storage

Choose a platform that provides audit trails, encrypted storage, and easy export to common HR systems for long-term recordkeeping.

Recommended field settings for an online form

Configure these fields when you create a digital Employee Security Awareness Form to ensure consistent input and reliable records.

Form Element	Configuration
Employee name	Required \| single-line text
Employee ID	Optional \| numeric field
Training date	Required \| date picker (MM/DD/YYYY)
Signature	Required \| eSignature field with audit trail

Typical timelines and periodic requirements

Establish clear deadlines for completion and refresher training to maintain a defensible record of awareness activities.

Initial completion:

Within first week of hire or onboarding

Refresher cycle:

Annually or as company policy requires

Remediation deadline:

Within 30 days after failed assessment

Record update:

Immediately after re-training or policy changes

Audit availability:

Provide records promptly during internal or external audits

Common mistakes to avoid when preparing the form

Leaving dates in inconsistent formats that complicate automated sorting and retention tracking across HR systems.
Accepting initials without a full signature when the form or policy requires a full handwritten or electronic signature.
Failing to store the signed document in a secure, access-controlled repository which can cause challenges during compliance reviews.
Not recording the training topics or version of materials used, making it difficult to demonstrate what instruction was provided.

Consequences of incomplete or inaccurate records

Regulatory exposure: Gaps can increase risk under HIPAA or industry rules

Operational risk: Inaccurate records hinder incident response

Disciplinary action: Lack of acknowledgement may affect employment decisions

Audit findings: Missing forms may trigger corrective actions

Liability: Poor documentation complicates legal defense

Data breaches: Untrained staff increase breach likelihood

Real-world examples of form use and outcomes

These condensed examples show how organizations applied the Employee Security Awareness Form to improve compliance and recordkeeping.

Optica Ventures LLC

The company standardized a digital acknowledgement form to track training attendance.

The change cut administrative delays.
The interface is simple and easy-to-use for our team; more importantly, it is just as easy for our customers.

Fertility Centers of Illinois

The clinic attached a HIPAA-specific acknowledgement to training records.

HR and security used e-signatures for faster retrieval.
The team praised responsive support and the integration with existing workflows that preserved compliance while accelerating turnaround.

Practical tips for accurate and efficient completion

Apply consistent formatting, automation, and version control to reduce errors and speed up processing of Employee Security Awareness Forms.

Standardize formats

Require MM/DD/YYYY for dates, predefine dropdowns for departments, and enforce required fields to keep data consistent across the HRIS.

Use templates

Maintain a single approved template for the form and track version history so acknowledgements reference the correct training materials.

Automate routing

Automate assignment, reminders, and archival to reduce manual steps and improve completion rates for large employee populations.

Secure storage

Store signed forms in an encrypted, access-controlled repository and ensure audit logs record retrieval and changes.

eSignature pricing and capability snapshot for signing the form

Compare basic pricing and common capabilities across popular eSignature solutions to evaluate cost and compliance fit for Employee Security Awareness Forms.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No envelope cap	100 envelopes/user/year	Varies	Varies	Varies

Frequently asked questions about the Employee Security Awareness Form

Answers to common questions about signing, retention, notarization, and eSignature validity for the Employee Security Awareness Form.

Need help? Contact support

Is notarization required?
Not typically. Employee training acknowledgements are usually internal HR records and do not require notarization; however, some states or agency-specific programs may demand notarized attestations for certain certifications or sensitive roles.
Can employees e-sign the form?
Yes. Under ESIGN and UETA, electronic signatures are legally valid when intent and consent are present and the record can be retained. Use an eSignature provider that captures an audit trail and provides reliable signer attribution.
How long should we keep signed forms?
Retention varies by industry. Retain during employment plus at least three years, extend to six years for HIPAA-related records, and follow any longer state or regulator-specific obligations.
What if an employee refuses to sign?
Document the refusal and the circumstances, consider alternate acknowledgement methods, and follow company disciplinary or compliance procedures to address non-compliance.
Are e-signed forms admissible?
Yes. Electronic signatures are admissible under the ESIGN Act and UETA when the four validity factors are present: intent, consent, attribution, and reliable retention of the record.
How do we correct errors on a signed form?
Do not alter the signed copy. Instead, create a corrected form or an amendment, have the employee re-sign, and retain both the original and the corrected records with clear notes explaining the change.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now