Kaspersky Automated Security Awareness Platform

Kaspersky Automated Security Awareness Platform (hereinafter also referred to as "ASAP") is an online learning platform that allows users to learn the rules of information security and threats related to it in their daily work, as well as to practice using real examples.

ASAP can be integrated with KUMA. After configuring integration, you can perform the following tasks in KUMA:

• Change user learning groups.
• View information about the courses taken by the users and the certificates they received.

Integration between ASAP and KUMA includes configuring API connection to ASAP. The process takes place in both solutions:

1. In ASAP, create an authorization token and obtain an address for API requests.
2. In KUMA, specify the address for API requests in ASAP, add an authorization token for API requests, and specify the email address of the ASAP administrator to receive notifications.

Creating a token in ASAP and getting a link for API requests

In order to be authorized, the API requests from KUMA to ASAP must be signed by a token created in ASAP. Only the company administrators can create tokens.

Creating a token

To create a token:

1. Sign in to the ASAP web interface.
2. In the Control panel section, click the Import and synchronization button, and then open the Open API tab.
3. Click the New token button and select the API methods used for integration in the window that opens:
   • GET /openapi/v1/groups
   • POST /openapi/v1/report
   • PATCH /openapi/v1/user/:userid
4. Click the Generate token button.
5. Copy the token and save it in any convenient way. This token is required to configure integration in KUMA.

The token is not stored in the ASAP system in the open form. After you close the Get token window, the token is unavailable for viewing. If you close the window without copying the token, you will need to click the New token button again for the system to generate a new token.

The issued token is valid for 12 months. After this period, the token is revoked. The issued token is also revoked if it is not used for 6 months.

Getting a link for API requests

To get the link used in ASAP for API requests:

1. Sign in to the ASAP web interface.
2. In the Control panel section, click the Import and synchronization button, and then open the Open API tab.
3. A link for accessing ASAP using the Open API is located at the bottom part of the window. Copy the link and save it in any convenient way. This link is required to configure integration in KUMA.

Configuring integration in KUMA

To configure KUMA integration with ASAP:

1. Open the KUMA web interface and select Settings → Kaspersky Automated Security Awareness Platform.

   The Kaspersky Automated Security Awareness Platform window opens.

2. In the Secret field click the button to create a secret of the token by entering the token received from ASAP:
   1. In the Name field, enter the name of the secret. Must contain 1 to 128 Unicode characters.
   2. In the Token field, enter the authorization token for API requests to ASAP.
   3. If necessary, add the secret description in the Description field.
   4. Click Save.
3. In the ASAP Open API URL field, specify the address used by ASAP for API requests.
4. In the ASAP administrator email field, specify the email address of the ASAP administrator who receives notifications when users are added to the learning groups using KUMA.
5. If necessary, in the Proxy drop-down list select the proxy server resource to be used to connect to ASAP.
6. To disable or enable integration with ASAP, select or clear the Disabled check box.
7. Click Save.

Integration with ASAP is configured in KUMA. When viewing information about alerts and incidents, you can select associated users to view which learning courses they have taken and to change their learning group.

Viewing information about the users from ASAP and changing learning groups

After configuring the integration between ASAP and KUMA, the following information from ASAP becomes available in alerts and incidents when you view data about associated users:

• The learning group to which the user belongs.
• The trainings passed by the user.
• The planned trainings and the current progress.
• The received certificates.

To view data about the user from ASAP:

1. In the KUMA web interface, in the Alerts or Incidents section, select the required alert or incident.
2. In the Related users section, click the desired account.

   The Account details window opens on the right side of the screen.

3. Select the ASAP courses details tab.

The window displays information about the user from ASAP.

You can change the learning group of a user in ASAP.

To change a user learning group in ASAP:

1. In the KUMA web interface, in the Alerts or Incidents section, select the required alert or incident.
2. In the Related users section, click the desired account.

   The Account details window opens on the right side of the screen.

3. In the Assign ASAP group drop-down list, select the ASAP learning group you want to assign the user to.
4. Click Apply.

The user is moved to the selected ASAP group, the ASAP company administrator is notified of the change in the learning group, and the study plan is recalculated for the selected learning group.

For details on learning groups and how to get started, refer to the ASAP documentation.