Team Training Packs for CMMC, HIPAA and Security Awareness
One checkout, one enrollment code, and a roster that shows who has finished. Buy a block of seats for a course, share the code with your people, and download the completion record when your assessor, auditor or client asks for it.
Packs start at $290 for 10 seats and run from 5 to 100 seats depending on the course. Every learner gets their own certificate of completion. You have 12 months to redeem the seats, and unredeemed seats are covered by the 30-day money-back guarantee described in the refund policy. Orders of 25 seats or more can be paid by invoice or purchase order.
Preparing for CMMC Level 2? The CMMC Level 2 Awareness and Training License covers all three CMMC courses for each user at $300 per user per year, with one code for the whole organization.
CMMC Level 2 Awareness and Training License
$300 per user per year
One license covers all three CMMC Level 2 Awareness and Training courses for each user, with one enrollment code for the whole organization. Sold for 1 to 500 users in a single order. Invoices are available for 25 or more users, payable in full before seats are issued.
The three courses one code unlocks
- CMMC Level 2 Security Awareness: Common Core (course 38) supports AT.L2-3.2.1 and AT.L2-3.2.3. Every user in scope: security awareness and insider-threat indicators.
- CMMC Level 2 Role-Based Training: General Users (course 39) supports AT.L2-3.2.2. Staff whose duties touch Controlled Unclassified Information.
- CMMC Level 2 Role-Based Training: Executives (course 40) supports AT.L2-3.2.2. Owners, officers and program leads.
What the license includes
One enrollment code for all three courses
A single code unlocks Common Core, General Users and Executives for every learner. Forward it once; each person redeems it from their own free account.
Role-based training included
The General Users and Executives courses are part of the license, so AT.L2-3.2.2 role-based training does not need a second purchase.
12 months of access per learner
Each learner has a year of access from the day they redeem, long enough for the annual training cycle the practices call for.
Roster with progress and CSV export
A private roster link that needs no login lists each learner, their progress in each course and their completion dates, and downloads as a CSV for your evidence folder.
A certificate per learner
Each learner earns a certificate of completion for each course they finish, with a number anyone can confirm on the public verification page.
Annual refresh of content
The three courses are refreshed each year so a renewed license trains the team on current material, not last year's.
1 to 500 users per order.
Billed once for the year. Secure card checkout.
After payment we email the enrollment code and the roster link to the address above. Each learner creates a free account and enters the code once to open all three courses.
What every team pack includes
A team pack is a block of seats for one course. The seats are identical to the individual enrollment a learner would buy on their own; the pack adds the pieces a manager needs to run and prove a rollout.
One enrollment code
A single code (TEAM- plus eight characters) and a claim link, emailed to you after checkout. Learners redeem it themselves; you do not enter anyone's details.
A signed roster with progress
A private roster link that needs no login. It lists each learner, their enrollment date, progress percentage, completion date and certificate number, with seats used and remaining at the top.
CSV export
One click downloads the roster as a CSV with the same columns, ready to attach to an assessment evidence folder, a HIPAA training log or a client report.
A certificate per learner
Each person who completes the course earns a certificate of completion with a unique number that anyone can confirm on the public verification page.
12 months to redeem
Seats stay available for a year from purchase, so new hires can use spare seats and you do not have to predict headcount to the person.
30-day guarantee on unredeemed seats
Within 30 days, seats nobody has claimed are refundable pro rata; a claimed seat follows the same under-25%-complete rule an individual purchase has.
Pack prices by course
Prices are in US dollars and include everything above. Larger packs cost less per seat. The button opens the course page on its team tab, where you pick the pack size, enter the work email that should receive the code and roster link, and pay by card through secure checkout. The course page is the price authority; the numbers here mirror it.
Need a course that is not listed here as a pack, or more than 100 seats? Use the invoice form and we quote it.
CMMC Level 2 Security Awareness: Common Core
Individual enrollment $49. About 63 min of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 10 seats | $290 | $29 per seat | 41% less per seat | Buy 10 seats |
| 25 seats | $625 | $25 per seat | 49% less per seat | Buy 25 seats |
| 50 seats | $999 | $19.98 per seat | 59% less per seat | Buy 50 seats |
| 100 seats | $1,499 | $14.99 per seat | 69% less per seat | Buy 100 seats |
CMMC Level 2 Role-Based Training: General Users
Individual enrollment $59. About 30 min of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 10 seats | $290 | $29 per seat | 51% less per seat | Buy 10 seats |
| 25 seats | $625 | $25 per seat | 58% less per seat | Buy 25 seats |
| 50 seats | $999 | $19.98 per seat | 66% less per seat | Buy 50 seats |
| 100 seats | $1,499 | $14.99 per seat | 75% less per seat | Buy 100 seats |
CMMC Level 2 Role-Based Training: Executives
Individual enrollment $149. About 30 min of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 5 seats | $595 | $119 per seat | 20% less per seat | Buy 5 seats |
| 10 seats | $990 | $99 per seat | 34% less per seat | Buy 10 seats |
| 25 seats | $1,995 | $79.80 per seat | 46% less per seat | Buy 25 seats |
2026 Security Awareness Training
Individual enrollment $49. About 90 min of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 10 seats | $290 | $29 per seat | 41% less per seat | Buy 10 seats |
| 25 seats | $625 | $25 per seat | 49% less per seat | Buy 25 seats |
| 50 seats | $999 | $19.98 per seat | 59% less per seat | Buy 50 seats |
| 100 seats | $1,499 | $14.99 per seat | 69% less per seat | Buy 100 seats |
CPA Firm Cybersecurity & Compliance: IRS, FTC Safeguards, and WISP Mastery
Individual enrollment $349. About 4 hours of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 5 seats | $999 | $199.80 per seat | 43% less per seat | Buy 5 seats |
FTC Compliance Mastery: Safeguards Rule, Privacy Rule & Consumer Protection
Individual enrollment $149. About 3.5 hours of self-paced lessons. Certificate of completion on finishing.
| Seats | Pack price | Per seat | Versus individual | Buy |
|---|---|---|---|---|
| 5 seats | $595 | $119 per seat | 20% less per seat | Buy 5 seats |
| 10 seats | $990 | $99 per seat | 34% less per seat | Buy 10 seats |
| 25 seats | $1,995 | $79.80 per seat | 46% less per seat | Buy 25 seats |
CMMC Level 2: which practices the courses support
The Awareness and Training (AT) domain of CMMC Level 2 carries three practices, drawn from NIST SP 800-171. The CMMC courses on this page were written to those practices, and each course names the practice it supports on its own page. Here is the mapping in one place:
- CMMC Level 2 Security Awareness: Common Core (course 38) supports AT.L2-3.2.1, security awareness for managers, system administrators and users, and AT.L2-3.2.3, recognizing and reporting potential indicators of insider threat.
- CMMC Level 2 Role-Based Training: General Users (course 39) and CMMC Level 2 Role-Based Training: Executives (course 40) support AT.L2-3.2.2, role-based security training for the people whose duties touch Controlled Unclassified Information.
A typical Level 2 rollout gives every user in scope the Common Core course plus the General Users course, and gives owners, officers and program leads the Executives course as well. The roster for each pack becomes the training record for that practice.
Plain statement of scope: this training supports the AT practices. It does not make an organization or an individual "CMMC certified", and it does not determine the result of an assessment. A Certified Third-Party Assessment Organization scores each practice against your system security plan, your policies and your evidence as a whole. If you need help with the rest of the plan, Petronella Technology Group, Inc. is a Cyber AB Registered Provider Organization and offers CMMC readiness services separately from this academy.
How a manager rolls out a team pack
Most teams go from purchase to a complete roster inside two weeks. This is the sequence we see work, written for the person who owns the rollout rather than for the learners.
- 1
Pick the course and the pack size
Count the people who must complete the training, then add a margin for new hires: seats stay redeemable for 12 months, and the next pack size up usually costs less per seat than a second small pack later. If you cannot pay by card, skip to the invoice form below.
- 2
Check out with a work email you control
The enrollment code, the claim link and the private roster link all go to the email you enter at checkout. Use a shared mailbox or the compliance lead's address, not a personal one, so the roster survives staff changes.
- 3
Announce it before you send the code
A short message from a manager stating why the training matters, the deadline, and that it takes about an hour raises completion more than any reminder afterwards. Mention that each person creates a free account with their own work email, because certificates are issued in the learner's name.
- 4
Send the claim link
Forward the claim link or the code. A learner opens the link, creates or signs in to a free academy account, and the course appears in their dashboard at no charge. There is nothing to approve on your side; the roster updates as each seat is used.
- 5
Watch the roster once a week
The roster shows seats remaining and each learner's progress percentage. Anyone still at 0% a week after the code went out has not opened the claim link; anyone stuck in the middle usually needs a calendar block, not a reminder email.
- 6
Export the CSV when the last person completes
Download the roster CSV, save it with the course title and date in the file name, and file it with your other training evidence. The certificate numbers in it can be verified by anyone at any time, so the CSV stands on its own.
What an assessor or auditor asks for, and where the roster answers it
Training requirements across frameworks share a shape: show that the right people received relevant content, when they received it, and that the organization can prove it later. For CMMC Level 2, NIST SP 800-171A lists the security awareness training curriculum, the training materials and training records among the items an assessor may examine for 3.2.1, 3.2.2 and 3.2.3, and lists personnel with training responsibilities among the people they may interview.
HIPAA's Security Rule requires a covered entity or business associate to implement a security awareness and training program for all members of its workforce, including management (45 CFR 164.308(a)(5)(i)). The FTC Safeguards Rule, which reaches CPA firms, tax return preparers and other non-bank financial institutions, requires security awareness training for personnel that is updated to reflect the risks the firm has identified (16 CFR 314.4(e)). None of these rules names a specific course; each expects you to choose relevant content and keep the record.
The roster is that record. It is generated from the platform's own enrollment and completion data, not typed by hand, and every certificate number on it resolves on the public verification page. Keep the CSV; the live roster link stays valid too, so you can show the current state on screen during an assessment.
How to read the roster CSV
- Course, Code
- The course the pack is for and the enrollment code it was redeemed with. One pack, one code, one course.
- Seats total, used, remaining
- How many seats you bought, how many have been redeemed and how many are still open for new hires.
- Redeem by
- The date 12 months after purchase. Unused seats cannot be redeemed after it.
- Name, Email
- As the learner entered them when creating their free account. Certificates are issued in this name.
- Enrolled at (UTC)
- When the learner redeemed a seat. All timestamps are in UTC so the file is unambiguous across offices.
- Status, Progress %
- Whether the learner has started, is in progress or has completed, with the completed-lessons percentage.
- Completed at (UTC)
- When the last lesson was finished. This is the date most reviewers want.
- Certificate number, Certificate issued at
- The unique number that anyone can verify, and when it was issued.
Who buys team packs, and what they usually pick
Defense contractors preparing for CMMC Level 2
Common Core for everyone in scope, General Users for the same people, and Executives for the leadership team. Many buy the 25-seat Common Core and General Users packs together and a 10-seat Executives pack, then repeat the purchase the following year because the practices call for the training to recur. Subcontractors often start here after a prime asks for their training records.
CPA, bookkeeping and tax firms
The CPA Firm Cybersecurity and Compliance course (IRS, FTC Safeguards and WISP topics) has a 5-seat pack sized for a small practice, and the security awareness course covers seasonal staff at a lower per-seat price. Firms that need a written information security program and annual training for the Safeguards Rule generally combine the two.
Healthcare practices and their business associates
The security awareness course fits the Security Rule's workforce training requirement for front desk, clinical and billing staff alike, and the roster doubles as the training log that a HIPAA compliance officer keeps. Practices with more than one location buy a pack per site so each office manager has their own roster link.
Managed service providers rolling out training to clients
An MSP buys one pack per client, so each client has its own enrollment code and roster, and the MSP forwards the roster CSV as part of the quarterly report. Because the roster link needs no login, the client's own compliance contact can hold a copy. Ask us about partner terms before you buy for several clients at once.
Invoice or purchase order for 25+ seats
Card checkout is the fastest route and works for every pack size and any license count. If your organization pays vendors by invoice or needs a purchase order number on the paperwork, create the invoice here for 25 seats or more: a team pack for one course, or the CMMC Level 2 Awareness and Training License for 25 to 500 users. The invoice is issued by Petronella Technology Group, Inc. the moment you submit, opens in your browser and lands in your inbox; a signed W-9 is available on request.
Invoices are payable in full before seats are issued.
The moment the invoice is paid we email the enrollment code, the claim link and the roster link to the address on the request, and the 12-month window starts on that date. Invoice amounts match the pack table above and the license price of $300 per user per year; there is no invoice surcharge.
Several courses on one order, a vendor portal, or something else unusual? Use the contact form, call Penny at 919-348-4912 or email support@petronellatech.com. Creating an invoice does not charge anything until it is paid.
When a pack is not the right shape
A team pack covers one course for a group of people. Two other formats exist for programs that go wider or deeper, and the self-paced course inside all three is the same.
All-access annual subscription
A per-learner annual plan that opens the whole catalog for a year, including courses added during the term. Fits an organization that wants the same people to take CMMC, HIPAA and security awareness courses over time rather than one course now.
See subscription plansCorporate cohort
A six-month, instructor-led rollout for a whole organization, with scheduled sessions and shared progress tracking alongside the self-paced courses. Fits a company that wants a guided program with a start and an end date rather than a code to forward.
Explore corporate cohortsNot sure which fits? The course catalog lists every course with its price and length, and the about page explains who writes the courses. Either way, a pack bought today is not wasted: if you move to a subscription or cohort later, the completions and certificates already earned stand.
Team pack questions
How does the team enrollment code work?
After checkout we email one enrollment code (it looks like TEAM- followed by eight characters), a claim link for your learners and a private roster link to the work email you entered. You forward the claim link or the code to your team. Each learner creates a free academy account, opens the claim link or enters the code on the course page, and is enrolled at no charge. Every redemption uses one seat from the pack, and the roster shows the seat count falling as people join.
Can I move a seat from one person to another?
Seat transfer is not yet self-serve. If someone leaves before finishing, or you sent the code to the wrong person, contact us at support@petronellatech.com or call Penny at 919-348-4912 with your enrollment code and the learner to change. We handle it manually and confirm by email.
Does every learner get a certificate, and can a third party verify it?
Yes. Each learner who completes the course receives their own certificate of completion with a unique certificate number. Anyone, including an assessor, auditor or client, can confirm a certificate at petronellatech.com/training/verify/ by entering the number, without an account. The roster and its CSV export list the certificate number and issue date for each learner.
Can we pay by invoice or purchase order instead of a card?
Yes, for orders of 25 seats or more. Send the request from the form on this page with your organization, the course, the seat count and a purchase order number if you use one. We return an invoice from Petronella Technology Group, Inc. Invoices are payable in full before seats are issued; once payment clears we issue the enrollment code and roster link exactly as a card purchase would. Card checkout on the course page is available for any pack size and is faster.
What are the refund terms for a team pack?
Team packs follow the individual-course 30-day money-back guarantee, applied per seat. Within 30 days of purchase, seats nobody has redeemed are refundable pro rata: the pack price divided by the seat count, multiplied by the unredeemed seats. A redeemed seat is refundable within the same 30 days only while that learner has completed less than 25% of the course. After 30 days the pack is not refundable except where consumer protection law requires otherwise. Refunding a redeemed seat ends that learner's access and voids any certificate for it. The full policy is at petronellatech.com/training/refund-policy/.
Which CMMC practices does the training support?
CMMC Level 2 Security Awareness: Common Core (course 38) supports AT.L2-3.2.1 (security awareness for managers, system administrators and users) and AT.L2-3.2.3 (recognizing and reporting potential indicators of insider threat). CMMC Level 2 Role-Based Training: General Users (course 39) and CMMC Level 2 Role-Based Training: Executives (course 40) support AT.L2-3.2.2 (role-based security training). The training is one input to those practices. Completing it does not make an organization or a person "CMMC certified" and does not determine the outcome of an assessment; the assessor decides that against your whole system security plan.
How long do learners have access?
A team pack gives you 12 months from purchase to redeem the seats; the roster shows the redeem-by date. Once a learner redeems a seat the course is in their account and they work through it at their own pace. Most people finish a 30 to 90 minute course in one sitting, and the roster records when each person enrolled, their progress percentage and when they completed.
Can you send a W-9 or vendor forms?
Yes. Petronella Technology Group, Inc. provides a signed W-9 on request, and we complete reasonable vendor onboarding or supplier forms for invoice orders. Ask in the notes field of the invoice form or email support@petronellatech.com after you order.
What does the roster show, and who can see it?
The roster link is private and signed: it works for the code it was issued for and nothing else, and it does not require a login, so a compliance lead or office manager can open it without an academy account. It shows seats total, used and remaining, the redeem-by date, and for each learner their name, email, enrollment date, status, progress percentage, completion date, certificate number and certificate issue date. A CSV export with the same columns downloads from the page.
What is the CMMC Level 2 Awareness and Training License, and how is it different from a pack?
A team pack is a block of seats for one course. The CMMC Level 2 Awareness and Training License is $300 per user per year and covers all three CMMC Level 2 courses for each user: CMMC Level 2 Security Awareness: Common Core (course 38, AT.L2-3.2.1 and AT.L2-3.2.3), CMMC Level 2 Role-Based Training: General Users (course 39, AT.L2-3.2.2) and CMMC Level 2 Role-Based Training: Executives (course 40, AT.L2-3.2.2). Role-based training is included, each learner has 12 months of access, and one enrollment code unlocks all three courses. It is sold for 1 to 500 users in a single order from the license section of this page. Buy it when the same people need the full Awareness and Training set; buy a pack when a group needs one course.
How does an invoice work for a license or a large pack?
For 25 or more seats or users, the invoice form on this page creates the invoice from Petronella Technology Group, Inc. the moment you submit it: you get a link to view and pay it online, and a copy goes to the work email you entered. Choose the license or a team pack, the seat count, and add a purchase order number if you use one. Invoices are payable in full before seats are issued; once it is paid we email the enrollment code and roster link to the same address, exactly as a card purchase would. Under 25 seats, card checkout is the route for both packs and the license.
We need more than 100 seats, or several courses for the same people. What then?
Buy more than one pack, or use the invoice form and describe the mix; we will quote it as one order. For programs that go beyond a single course, the all-access annual subscription (per-learner, every course for a year) and the corporate cohort (a six-month, instructor-led rollout) are the next tiers, and both are described on their own pages linked from this one. Call Penny at 919-348-4912 if you would rather talk it through.
Ready to enroll the team?
Pick a pack above to check out by card, send the invoice form for 25 seats or more, or call Penny and describe what you need. Petronella Technology Group, Inc. has served businesses since 2002, and the people who answer the phone are the same people who built the courses.