The list of recommended tasks are in the attached pdfs in both a summary and detailed form. These outline ASAP, the Automated Security Awareness Program. Ultimately, these are recommended steps to take so your organization is successful in the program adoption. This What is ASAP? video gives a brief description, as well as Automated Security Awareness Program (ASAP). We have already worked through the questionnaire, marking most items as "needed" which adds the most options into the implementation list.
KMSAT Tutorial Videos - Main page for the Getting Started tutorial videos
User Management - How to import and manage users. They mention Active Directory Integration, which is possible for some libraries, but there is one drawback. This is worth discussing in a meeting.
Training - Focuses on developing Training Campaigns. While Security Awareness is a primary reason we are working with this system, it should not be overlooked that they also have some EDI, Ethics, Harassment, Remote Work, etc. topics. It is even possible to add your own content to the library. Everything you find a use for just increases the service's value.
Phishing - Focuses on developing Phishing Campaigns. We encourage members to continuously (but not excessively) test their staff's awareness by using Phishing Campaigns. It is important for staff to know that these tests are not about trapping or embarrassing them, but instead it is about giving them a regular reminder to remain vigilant. These test are also useful in identifying staff that struggle to see the red flags of a phishing email, and guiding them towards training that helps them to improve.
If possible, I'd like to get a group meeting going in the next week or two and work on timelines and next steps. We have Mesa County Libraries, Delta County Libraries, Garfield County Libraries, and Basalt Regional Library lined up for pilot implementations. Even if full implementation plans might not be until later this year, I think it's worth working through these initial plans sooner rather than later. I'll send out a Doodle poll with some meeting options.