Ethena’s integration with Vanta allows admins to integrate Ethena’s training records and system access records with Vanta. This allows companies to automate tracking for these two tests within Vanta, and will automatically show whether those tests are passing/failing for the company’s specified Vanta frameworks.
Setup Requirements: Prior to beginning your integration setup, please confirm that you are an admin in both Ethena and Vanta. If you are not an admin in one of those two tools, please reach out to your system admins to request access. |
1. Head to your Integration Settings page and navigate to Security Platform > Vanta > Connect
2. Connect frameworks
Once you select 'Connect', you'll see an overview of the integration setup steps. You can then open the 'Frameworks' tab to select which courses you'd like to connect to their corresponding Vanta frameworks.
💡 Ethena note: We currently support six Vanta integrations: SOC II, ISO 27001, HIPAA, GDPR, PCI, and CCPA. Please reach out to your CSM or support@goethena.com to request any other frameworks that might be helpful for reporting.
From there, select '+ Add Courses' to add your courses to the relevant Vanta frameworks. Both Ethena courses and custom courses can be added here.
When you select '+ Add Courses', you'll be able to select as many courses as are relevant to that framework:
Once you've added all relevant courses to all relevant frameworks, your setup screen should look something like this:
3. Indicate which campaigns to sync
When setting up the integration, you can choose to sync only Ethena campaigns or all campaigns. "Ethena training campaigns" are the core learning campaigns that most commonly include the foundational course content, while "custom training campaigns" often include optional content or continuous learning modules. More information here.
💡 Ethena note: It's helpful to have only one campaign connected to each framework, so in most cases, 'Sync only Ethena campaigns' will be the best option here.
Once you've made your selection, click 'Review & Save' and save your changes.
4. Authorize in Vanta
Finally, you'll be taken over to Vanta to authorize Ethena's app access. Click 'Allow'.
5. Review data in Ethena
After the above steps are completed, your integration should be enabled! On the Ethena Integration Settings page, you should be able to see an overview of all synced user records and completion data. You can also edit frameworks from this page if needed.
Frequently Asked Questions
1. How frequently does the Ethena & Vanta integration sync? About twice a day; the specific sync times vary each day.
2. What do I do if I'm seeing a discrepancy in my Vanta & Ethena user lists? Ensure that all active team members are listed in both Ethena and Vanta. Also, confirm whether the email address listed for the user in Ethena (on the Team List) matches the email address listed for them in Vanta (under Personnel > People). If the user does not have an email address listed in Ethena at all, their data will not be available in Vanta.
If you identify that a user is present in Ethena, but not in Vanta, you can go to Personnel > Access in Vanta and choose 'Ethena' in the first dropdown. You can then edit any users and choose '+ Add new person' to add them in Vanta.
3. Are new training campaigns from a course linked to a Vanta framework automatically added to that framework? Yes, when you create a new campaign after Vanta integration setup, it will automatically be added to the correct Vanta framework it's mapped to.
4. If I have multiple training campaigns associated with one framework, does a learner need to complete all associated campaigns to be considered complete in Vanta? Yes. Vanta takes a learner's 'worst status', so if there are multiple campaigns associated with a single framework, the learner needs to have completed all of their assigned campaigns within that framework (not just one of them) to be considered 'Completed.'
5. How do I see Ethena training data within Vanta? In your Vanta admin account, head to Compliance > Frameworks and open any of the frameworks that you've connected Ethena training data to. Search amongst the 'Requirement Categories' for the keyword 'training.' For SOC 2, for example, there's a control called 'Security awareness training implemented.'
From there, click into the relevant test (e.g. 'General security awareness training records tracked' for SOC 2). You'll be taken to a page that lists all outstanding users who have yet to complete their training and who need to take action.
Navigating to 'Source data' and downloading the CSV will include users who have already completed training as well.
Comments
0 comments
Please sign in to leave a comment.