Full policy

FRSecure Academy Terms of Use

Version 1.0

1. Purpose and Acceptance

FRSecure Academy provides education, training, assessments, learning resources, and related services for information security professionals, students, employees, clients, and other authorized learners.

By accessing or using FRSecure Academy, you agree to these Terms of Use and to any additional requirements that apply to a particular course, program, assessment, or learning activity.

If you do not agree to these Terms of Use, you may not use FRSecure Academy.

2. Accounts and Authorized Access

Access to FRSecure Academy is provided to authorized users for legitimate educational and administrative purposes.

Your Academy account is assigned to you individually. You may not share your account, password, authentication credentials, or access with another person.

You are responsible for:

• providing accurate account information;
• protecting your account and authentication credentials;
• using reasonable security practices;
• promptly reporting suspected unauthorized access or compromise; and
• using Academy resources only for authorized purposes.

You may not access another person's account or attempt to obtain privileges or access that have not been granted to you.

FRSecure Academy may suspend, restrict, or terminate access when reasonably necessary to protect learners, systems, information, intellectual property, or the integrity of Academy programs.

3. Acceptable Use

You must use FRSecure Academy lawfully, responsibly, and in a manner consistent with its educational purpose.

You may not:

• attempt to gain unauthorized access to systems, accounts, courses, assessments, records, or information;
• interfere with or disrupt Academy systems or services;
• bypass or attempt to bypass security, access, enrollment, or assessment controls;
• introduce malicious software, harmful code, or intentionally destructive content;
• scrape, harvest, systematically extract, or automatically collect Academy content or user information without authorization;
• use Academy systems to harass, threaten, abuse, impersonate, or unlawfully discriminate against another person;
• use Academy resources for unlawful activity; or
• assist another person in violating these Terms.

Information security education sometimes requires discussion or demonstration of techniques that could be misused. Such material is provided for legitimate educational and defensive purposes. You are responsible for applying what you learn lawfully, ethically, and only against systems, information, or environments for which you have appropriate authorization.

4. Course Materials and Intellectual Property

FRSecure Academy courses may contain text, presentations, videos, recordings, diagrams, exercises, assessments, software, templates, frameworks, methodologies, documentation, and other educational materials.

Unless expressly stated otherwise, these materials are protected by applicable intellectual-property rights and are provided for your personal or authorized organizational learning use.

You may not reproduce, republish, sell, sublicense, publicly distribute, publicly display, or commercially exploit Academy materials without authorization from the applicable rights holder.

Downloading or accessing material through the Academy does not transfer ownership of that material to you.

Some courses may contain third-party materials. Those materials remain subject to the rights and terms established by their respective owners.

Nothing in these Terms prevents you from applying the knowledge, skills, concepts, or experience you legitimately gain through your education.

5. Assessments and Academic Integrity

Assessments are intended to provide meaningful evidence of learning.

Unless collaboration, external resources, artificial intelligence tools, or other assistance is expressly permitted for a particular assessment, work submitted as your own must represent your own effort.

You may not:

• impersonate another learner;
• complete an assessment on another person's behalf;
• have another person complete an assessment on your behalf;
• improperly obtain or distribute restricted assessment questions or answers;
• falsify completion, attendance, assessment, or credential information; or
• intentionally undermine the integrity of an Academy assessment.

Specific courses or programs may establish additional assessment rules. Those requirements apply in addition to these Terms.

FRSecure Academy may investigate suspected violations of assessment integrity and may invalidate affected results, completion records, badges, certificates, or other credentials when appropriate.

6. Completion, Competency, Badges, and Credentials

FRSecure Academy may record participation, progress, assessment results, completion, badges, certificates, or other educational achievements.

These records represent only what the applicable course or program is designed and authorized to establish.

Course completion does not, by itself, establish professional competency, certification, licensure, or qualification unless the applicable program expressly states otherwise.

Likewise, attendance does not necessarily establish completion, completion does not necessarily establish competency, and competency does not constitute certification unless the applicable program has deliberately established that relationship.

Requirements for completion, assessment, badges, certificates, or other credentials may vary by course or program.

FRSecure Academy may correct or invalidate a credential or completion record if it was issued in error, obtained through fraud or material misrepresentation, or affected by a substantiated violation of assessment integrity.

7. Learner Content and Communications

You may be permitted to submit assignments, forum posts, messages, files, comments, assessment responses, or other content through FRSecure Academy.

You remain responsible for content you submit.

You must have the right to submit that content and must not knowingly submit material that violates another person's intellectual-property, privacy, confidentiality, or other legal rights.

Do not submit passwords, authentication secrets, unnecessary sensitive personal information, confidential client information, regulated data, or other information that is not appropriate or necessary for the learning activity.

FRSecure Academy may remove or restrict access to content when reasonably necessary for security, privacy, legal compliance, course administration, or enforcement of these Terms.

8. Privacy and Academy Records

Use of FRSecure Academy involves the collection and processing of information necessary to operate the Academy, administer accounts and enrollments, deliver training, support learners, conduct assessments, maintain educational records, secure the service, and meet applicable business or legal obligations.

Additional information about these practices is provided in the FRSecure Academy Privacy Notice.

Certain Academy records may need to be retained after access to a course or account ends. Removal of access does not necessarily require deletion of legitimate educational, security, administrative, contractual, or compliance records.

Privacy requests will be handled in accordance with applicable requirements and FRSecure Academy's established privacy and records-management practices.

9. Availability and Changes

FRSecure Academy is intended to provide reliable access to learning resources, but uninterrupted or error-free availability cannot be guaranteed.

Maintenance, security events, technical failures, third-party dependencies, upgrades, or other circumstances may occasionally affect availability.

FRSecure Academy may modify its platform, features, courses, programs, schedules, assessments, or learning resources when reasonably necessary.

When a change could materially affect learners who are already participating in a course or program, FRSecure Academy will make reasonable efforts to manage the change in a way that preserves the integrity of learner records and educational outcomes.

10. Suspension and Termination

FRSecure Academy may suspend or terminate access when reasonably necessary because of:

• violation of these Terms;
• unauthorized or fraudulent activity;
• threats to the security or integrity of Academy systems or information;
• material assessment-integrity violations;
• expiration or termination of the learner's authorized enrollment or relationship with the Academy;
• contractual or legal requirements; or
• other circumstances requiring access to be withdrawn.

Suspension or termination of access does not necessarily delete historical Academy records.

Where appropriate, FRSecure Academy may preserve records necessary to document participation, assessments, credentials, security events, administrative actions, contractual obligations, or other legitimate historical information.

11. Educational Information and Professional Responsibility

FRSecure Academy provides educational information and training. Academy materials cannot account for every technical environment, organization, legal requirement, business circumstance, or professional situation.

You remain responsible for exercising appropriate professional judgment when applying information obtained through the Academy.

Where legal, regulatory, contractual, financial, safety, or other specialized professional advice is required, appropriate qualified advice should be obtained for the specific circumstances.

12. Third-Party Services and Resources

Some Academy courses or services may reference, embed, integrate with, or link to third-party systems, websites, software, content, or services.

Third-party services may be governed by their own terms, privacy practices, licensing requirements, and availability conditions.

A reference or link to a third-party resource does not necessarily constitute endorsement of that resource unless expressly stated.

13. Changes to These Terms

FRSecure Academy may revise these Terms when necessary to reflect changes in Academy services, technology, security requirements, legal obligations, or administrative practices.

Material revisions will be issued as a new policy version where appropriate.

You may be required to review and agree to a revised version before continuing to use FRSecure Academy.

The applicable version and agreement history may be retained as part of the Academy's administrative records.

14. Contact

Questions about these Terms of Use or the operation of FRSecure Academy may be directed to:

FRSecure Academy
Email: training@frsecure.academy

Full policy

FRSecure Academy Privacy Notice

Version 1.0

FRSecure Academy respects the privacy of the people who use the Academy and is committed to handling personal information responsibly, securely, and transparently.

This Privacy Notice explains the types of personal information FRSecure Academy may collect through the Academy learning management system (“Academy”), why that information is used, how it may be shared and protected, how long it may be retained, and the choices and rights that may be available to users.

1. Information We Collect

FRSecure Academy may collect and maintain information necessary to provide, administer, secure, and improve Academy services.

Depending on how you use the Academy, this may include:

Account and profile information, such as your name, email address, username, organization, job-related information, profile preferences, and other information associated with your Academy account.

Enrollment information, including courses, programs, cohorts, groups, enrollment dates, enrollment status, and other information related to your participation in Academy training.

Learning and activity information, including course access, activities viewed or completed, progress, participation, submissions, assignments, attendance information, and other learning activity.

Assessment and achievement information, including quiz and examination results, grades, completion records, competency information, certificates, badges, credentials, and other evidence of learning or achievement.

Communications, including messages, discussion posts, support requests, instructor communications, feedback, and other information you provide through Academy communication features.

Technical and security information, including IP addresses, authentication events, browser and device information, timestamps, system logs, security events, and other information necessary to operate, troubleshoot, and protect the Academy.

Cookies and session information may also be used to authenticate users, maintain sessions, remember preferences, provide Academy functionality, and protect the security of the service.

2. How We Use Information

FRSecure Academy may use personal information to:

• create, maintain, and secure Academy accounts;
• authenticate users and manage access;
• enroll users in courses and training programs;
• deliver educational content and learning experiences;
• track course participation and progress;
• administer assessments and evaluate learning;
• maintain grades, completion records, competencies, and credentials;
• communicate with learners, instructors, administrators, and program personnel;
• provide technical and learner support;
• issue and verify certificates, badges, or other credentials;
• operate, maintain, troubleshoot, and improve the Academy;
• detect, investigate, and respond to security incidents or misuse;
• maintain appropriate administrative, educational, contractual, and historical records;
• comply with applicable legal, regulatory, contractual, or organizational obligations; and
• protect the rights, safety, security, and legitimate interests of FRSecure, Academy users, and others.

FRSecure Academy seeks to collect and use information that is reasonably necessary for legitimate educational, operational, administrative, security, contractual, or legal purposes.

3. Consent and Other Bases for Processing

Your acknowledgement of this Privacy Notice confirms that the notice has been presented to you. It does not necessarily mean that consent is the legal basis for every processing activity described in this notice.

Depending on the circumstances and applicable law, FRSecure Academy may process personal information because it is necessary to provide requested services, administer a contractual or educational relationship, comply with legal obligations, protect legitimate interests, maintain security, or for another lawful purpose.

Where consent is specifically required for a particular processing activity, FRSecure Academy may request that consent separately.

4. Learning Records and Historical Integrity

Some Academy information represents an educational or administrative record rather than temporary account information.

For example, enrollment history, assessment results, course completions, certificates, credentials, and related records may need to be preserved after a course ends or an Academy account is suspended or closed.

Removing a user's ability to access the Academy therefore does not necessarily require deletion of all information associated with that user.

FRSecure Academy seeks to balance legitimate recordkeeping requirements with applicable privacy rights and data-retention obligations.

5. Sharing and Service Providers

FRSecure Academy does not sell Academy users' personal information as part of operating the Academy.

Information may be made available to authorized FRSecure personnel, instructors, program administrators, support personnel, service providers, contractors, or other parties when access is reasonably necessary for an authorized purpose.

FRSecure Academy also relies on technology and service providers to operate the Academy. These may include infrastructure hosting, email delivery, data storage, backup, security, authentication, communications, and other technology providers.

Information provided to service providers should be limited to what is reasonably necessary for the service being provided and handled subject to appropriate contractual, security, privacy, or other safeguards where applicable.

Information may also be disclosed when reasonably necessary to comply with law, legal process, contractual obligations, or legitimate requests from authorized authorities, or to protect the rights, property, or safety of FRSecure, Academy users, or others.

6. Information Security

FRSecure Academy uses administrative, technical, and operational safeguards intended to protect Academy information against unauthorized access, disclosure, alteration, destruction, or misuse.

These safeguards may include access controls, authentication protections, encryption, system monitoring, logging, backups, vulnerability and security management, and restrictions on administrative privileges.

No information system can be guaranteed to be completely secure. Users also have a responsibility to protect their account credentials and promptly report suspected unauthorized access or other security concerns.

7. Retention and Deletion

FRSecure Academy retains information according to its purpose, operational requirements, legitimate educational and business needs, contractual requirements, security needs, and applicable legal or regulatory obligations.

Different categories of information may therefore have different retention periods.

When information is no longer reasonably required and no legal, contractual, operational, security, historical, or other legitimate reason requires its preservation, it may be deleted, anonymized, or otherwise disposed of in accordance with applicable procedures.

Deletion from an active production system does not necessarily result in immediate deletion from backups. Backup systems exist primarily for recovery and continuity purposes and are not intended to serve as permanent record-retention systems. Information contained in backups may remain until those backups expire or are securely replaced according to established backup-retention practices.

Legal holds, investigations, disputes, security incidents, or other legitimate requirements may require information to be preserved beyond its normal retention period.

8. International Processing

FRSecure Academy and the service providers supporting it may operate systems or process information in more than one geographic location.

As a result, personal information may be stored or processed outside the country, state, province, or other jurisdiction in which a user resides.

Where required, FRSecure Academy will seek to use appropriate safeguards for international transfers or processing of personal information.

9. Your Privacy Choices and Rights

Depending on where you live and the circumstances in which your information is processed, you may have rights regarding your personal information.

These may include rights to request access to information, correction of inaccurate information, deletion of certain information, restriction or objection to certain processing, withdrawal of consent where processing depends upon consent, or other rights provided by applicable law.

These rights are not necessarily absolute. For example, FRSecure Academy may be required or permitted to retain certain educational, transactional, security, contractual, legal, or historical records even after a deletion request.

FRSecure Academy may need to verify your identity before fulfilling a privacy request.

10. Information About Other People

Users should not provide personal information about another person through the Academy unless they are authorized to do so and the information is appropriate for the educational or administrative purpose involved.

Course assignments, discussion forums, messages, uploads, and other Academy features should not be used to disclose unnecessary sensitive or confidential information about other people.

11. Children's Information

FRSecure Academy is primarily intended for professional and adult education.

If an Academy program is offered to minors, additional consent, authorization, privacy, or safeguarding requirements may apply. FRSecure Academy may implement additional procedures appropriate to that program and applicable law.

12. Changes to This Privacy Notice

FRSecure Academy may update this Privacy Notice when Academy services, practices, legal requirements, or privacy practices change.

Material changes may result in a new policy version and may require users to review or acknowledge the updated notice through the Academy.

Historical versions may be retained where appropriate to document the privacy terms applicable at a particular time.

13. Contact Us

Questions, concerns, or requests regarding this Privacy Notice or the handling of personal information may be directed to:

FRSecure Academy
Email: training@frsecure.academy

When submitting a privacy request, please provide enough information for FRSecure Academy to understand the request and, where necessary, verify your identity. Do not include passwords or other unnecessary sensitive information in your request.