For staff & examiners

Can you prove your staff fraud training to an examiner?

Yes. CertAware turns staff fraud training into examiner-defensible evidence: a dated completion record and an assessment score for every person, un-gameable assessments with fresh questions each attempt, verifiable certificate codes, and a tamper-evident audit trail. Here is exactly what you can put in front of your board and your examiner.

The exam problem

Fraud losses are a live examiner focus, and NCUA supervisory priorities put both fraud and third-party vendor oversight on the table. A binder that says “we cover fraud in annual training” is no longer a finding you can defend. Examiners want documented evidence: who was trained, when, how they scored, and whether the training reflects the scams happening now — plus due-diligence answers for the vendor providing it.

The evidence you can produce

Dated per-person completion records

Every staff member has a time-stamped completion record. When an examiner asks who was trained and when, you produce a per-person roster — not a vague "we do annual training."

Per-person assessment scores

Completion isn't just a checkbox. Each person has an assessment score, so you can show comprehension across your staff and follow up with anyone who needs it.

Un-gameable completion

Assessments pull fresh questions each attempt, so a passing result reflects understanding — not a memorized answer key or a click-through. Completion you can defend, not completion you can game.

Verifiable certificate codes

Each completion carries a certificate code that can be independently verified. The record is checkable, not just a printed PDF that anyone could fabricate.

Mapped to your fraud program

  • Training tied to real controls. Staff learn the fraud typologies you actually face — wire and ACH fraud, elder financial exploitation, account takeover — so the training supports your fraud and BSA program instead of sitting beside it.

  • Kept current as scams change. New typologies are added on a fast cadence — see the public Scam Library — so your program isn’t refreshed once a year while the threats move every few weeks.

  • Records you can retain and retrieve. Completion records and their tamper-evident audit trail persist, so when an exam or an internal review asks for last quarter’s evidence, you can pull it.

Compliance questions, answered

Can CertAware show an examiner who completed training and when?
Yes. Every person has a dated completion record and an assessment score, so you can produce a per-person, time-stamped roster of who was trained, when, and how they scored.
How is the training un-gameable?
Assessments draw fresh questions each attempt, so completion reflects understanding rather than a memorized or clicked-through answer key. Each completion also carries a verifiable certificate code.
Does the record hold up as evidence?
Completions and approvals are written to a tamper-evident, hash-chained audit trail — altering, deleting, or reordering any record breaks the chain, so the evidence is defensible.
How does this map to NCUA vendor oversight?
CertAware provides documented controls, US hosting on AWS, and least-privilege access with MFA — the artifacts a vendor-due-diligence review asks for, shared with your team during an active review.

See a sample examiner-ready report

We’ll walk your risk and compliance team through the completion records, scores, and audit trail you’d hand an examiner.

Reviewing our data handling and vendor due-diligence? See our security page.