DoD Annual Security Awareness Refreshers (2026)
The DoD annual security awareness refresher is essential for protecting classified and CUI-marked information. Learn compliance steps, insider threat prevention, and handling requirements for 2026.
On this page 8 sections
The DoD annual security awareness refresher ensures military and civilian employees properly handle classified and controlled unclassified information (CUI). With rising cyber threats and insider risks, the Department of Defense (DoD) mandates this training for all individuals with access to sensitive data. Learn more: What Is Security Awareness Training.
In August 2024, Gokhan Gun, a DoD contractor, was arrested for mishandling over 250 classified documents, includingTop Secret materials found in his home and travel bag before he attempted to leave the country (CBS News). This case underscores the need for security awareness training to prevent breaches that could endanger national security.
This blog covers why DoD security awareness refreshers matter, key topics like classified data protection and CUI handling, and best practices for compliance.
Why DoD Annual Security Awareness Refreshers Are Essential
The DoD security refresher training is more than a routine requirement. It helps protect sensitive military and government information. It teaches employees how to handleclassified data and Controlled Unclassified Information (CUI) properly, reducing the risk of leaks or unauthorized access.
Without this training, employees might unintentionally break security rules, leading to serious data breaches. To prevent this, the DoD followsDODM 5200.01 (PDF, opens in a new tab), ensuring that only authorized individuals can access classified materials.
Here’s why this training is important:
- Protects national security - Prevents leaks and mishandling of sensitive information.
- Ensures compliance - Helps employees follow DoD rules for classifying and marking information.
- Reduces cyber threats - Educates employees on new risks and insider threats.
What You’ll Learn in the DoD Security Awareness Refresher
The DoD Security Awareness Refresher ensures that employees understand the latest security protocols for protecting classified and Controlled Unclassified Information (CUI). It provides essential guidelines for handling sensitive materials, preventing unauthorized access, and complying with DoD regulations. This training helps reinforce best practices for maintaining national security and reducing the risks of data breaches or insider threats.
Handling Classified Information
Employees must follow strict guidelines when handling Confidential, Secret, or Top Secret documents to prevent unauthorized access. The training covers proper procedures for transmitting classified materials:
- Confidential documents can be sent using USPS First Class Mail.
- Secret and Top Secret materials require secure methods, such as the Defense Courier Service.
- Improper handling or disclosure can result in severe legal consequences, including revocation of security access or criminal charges.
CUI Marking and Legacy Classifications
The DoD has replaced older labels like FOUO (For Official Use Only), SBU (Sensitive But Unclassified), and LES (Law Enforcement Sensitive) with Controlled Unclassified Information (CUI) to improve consistency in safeguarding sensitive data.
This refresher training covers:
- How to properly mark CUI using a Designation Indicator Block.
- Steps to update legacy-marked materials to meet current CUI standards.
- When and how to redact FOUO-marked documents before sharing them outside the DoD.
Security Protocols and Physical Safeguards
In addition to digital security, the training highlights the physical protection of classified information to prevent unauthorized access. Key best practices include:
- Storing classified materials in secure storage containers and restricted areas to ensure proper protection.
- Limiting access to only those with a "need-to-know" to reduce exposure risks.
- Confirming security authorizations through the SF 312 (Classified Information Nondisclosure Agreement) before granting access.
To explore the best security awareness training options available, check out the Keepnet guide on Top Security Awareness Training Solutions (2026) for insights on the most effective tools to enhance your organization's security posture.
Security awareness training
Training that follows what each employee does
Short modules and nudges matched to behaviour, with compliance reporting built in.
How to Pass the DoD Security Awareness Refresher
The DoD Annual Security Awareness Refresher is an online course offered by the Center for Development of Security Excellence (CDSE). To earn a certificate of completion, participants must score at least 75% on either the pre-test or post-test. Since the course does not save progress, it's essential to be well-prepared and complete it in one session.
Tips for 2026: How to Succeed in the DoD Security Awareness Refresher
To successfully complete the DoD Security Awareness Refresher, it's important to understand key security protocols and be prepared for the assessment.
- Verify your security authorization - Check your SF 312 (Classified Information Nondisclosure Agreement (PDF, opens in a new tab)) to confirm you are approved to handle classified information.
- Learn CUI marking rules - Understand how to properly label and protect Controlled Unclassified Information (CUI) according to DoD policies.
- Know the transition from legacy markings - Be aware of how older labels like FOUO (For Official Use Only), SBU (Sensitive But Unclassified), and LES (Law Enforcement Sensitive) have been replaced by CUI.
- Review secure transmission procedures - Study the correct methods for sending, storing, and disposing of classified materials to prevent security breaches.
By following these steps, you’ll reinforce your security knowledge and ensure compliance with DoD regulations.
The Role of Security Awareness in Protecting National Security
The DoD Annual Security Awareness Refresher is more than a compliance requirement. It iscritical for protecting classified and CUI-marked information. Mishandling sensitive data can result in security breaches, legal consequences, and threats to national security.
As cyber threats and insider risks continue to evolve, ongoing security awareness training is critical. This refresher ensures that military personnel, government employees, and contractors fully understand their responsibilities in safeguarding classified materials and CUI.
By prioritizing security education, the DoD strengthens its defenses and prevents unauthorized access to critical information.
To further enhance your organization's security awareness and risk preparedness, explore Keepnet’s Adaptive Security Awareness Training. With 11,000+ training materials from 12 content providers in 61 languages (as of 19 October 2026), this program offers personalized sessions tailored to your team's cybersecurity gaps and skill levels.
Further reading
- Cybersecurity Awareness Training: Program design patterns that complement mandatory refreshers.
- Compliance Frameworks Guide: Align workforce training with audit and regulatory expectations.
Sources
Frequently asked questions
It is mandatory annual training for DoD personnel and contractors with access to classified or CUI. It reinforces marking, transmission, physical security, insider threat, and cybersecurity expectations aligned with current policy.
Military members, civilian employees, and cleared contractors who handle classified information or CUI must complete it each year to maintain access and compliance.
Most participants finish in roughly 25-30 minutes. Passing thresholds (often 75% or higher on assessments) are required for certificate issuance.
Yes. Approved online modules are common, but sessions may need to be completed in one sitting depending on the platform configuration.
Typical modules include classified handling, CUI marking, insider threat indicators, secure transmission, physical security, and incident reporting responsibilities.
Incomplete training can lead to suspended system access, clearance issues, or disciplinary action. Operationally, untrained personnel increase accidental disclosure and insider risk.
Schedule your 30-minute demo now
You’ll learn how to:
- Strengthen DoD compliance with adaptive security awareness training.
- Tailor sessions to address cybersecurity gaps and employee risks.
- Access 11,000+ training materials from 12 content providers in 61 languages (as of 19 October 2026) to enhance awareness and protection against evolving cybersecurity risks.
30 minutes with a Keepnet specialist, on your own use cases.
Author
Ozan Ucar
Founder and CEO, Keepnet
Ozan founded Keepnet in 2017 and has worked in cyber security since 2006. He leads Keepnet's product direction and works with security teams on measuring and changing the behaviours behind incidents.