# DoD Annual Security Awareness Refreshers (2026)

Source: https://keepnetlabs.com/blog/do-d-annual-security-awareness-refreshers
Published: 2025-03-20
Updated: 2026-10-09
Author: Ozan Ucar, Founder and CEO of Keepnet
Category: Security Awareness Training

> The DoD annual security awareness refresher is essential for protecting classified and CUI-marked information. Learn compliance steps, insider threat prevention, and handling requirements for 2026.

The **DoD annual security awareness refresher** ensures **military and civilian employees** properly handle **classified and controlled unclassified information (CUI**). With rising cyber threats and insider risks, the **Department of Defense (DoD**) mandates this training for all individuals with access to sensitive data. Learn more: [What Is Security Awareness Training](https://keepnetlabs.com/blog/what-is-security-awareness).

In **August 2024, Gokhan Gun**, a DoD contractor, was arrested for **mishandling over 250 classified documents**, including**Top Secret** materials found in his home and travel bag before he attempted to leave the country ([CBS News](https://www.cbsnews.com/news/pentagon-employee-gokhan-gun-arrested-top-secret/)). This case underscores the need for **security awareness training** to prevent breaches that could endanger national security.

This blog covers why **DoD security awareness refreshers** matter, key topics like classified data protection and CUI handling, and best practices for compliance.&#x20;

### Why DoD Annual Security Awareness Refreshers Are Essential

The **DoD security refresher training** is more than a routine requirement. It helps protect sensitive military and government information. It teaches employees how to handle**classified data and Controlled Unclassified Information (CUI**) properly, reducing the risk of leaks or unauthorized access.

Without this training, employees might unintentionally break security rules, leading to serious data breaches. To prevent this, the **DoD follows**[DODM 5200.01](https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/520001m_vol3.pdf), ensuring that only authorized individuals can access classified materials.

**Here’s why this training is important**:

- **Protects national security** - Prevents leaks and mishandling of sensitive information.
- **Ensures compliance** - Helps employees follow DoD rules for classifying and marking information.
- **Reduces cyber threats** - Educates employees on new risks and insider threats.

## What You’ll Learn in the DoD Security Awareness Refresher

![What You’ll Learn in the DoD Security Awareness Refresher](https://timely-benefit-e63d540317.media.strapiapp.com/What_You_ll_Learn_in_the_Do_D_Security_Awareness_Refresher_53b6f8ebff.png)

*Picture 1: What You’ll Learn in the DoD Security Awareness Refresher*

The **DoD Security Awareness Refresher** ensures that employees understand the latest security protocols for protecting **classified and Controlled Unclassified Information (CUI**). It provides essential guidelines for handling sensitive materials, preventing unauthorized access, and complying with **DoD regulations**. This training helps reinforce best practices for maintaining **national security** and reducing the risks of data breaches or insider threats.

### Handling Classified Information

Employees must follow strict guidelines when handling **Confidential, Secret, or Top Secret** documents to prevent unauthorized access. The training covers proper procedures for transmitting classified materials:

![Classified Information Handling](https://timely-benefit-e63d540317.media.strapiapp.com/Classified_Information_Handling_bb29389fff.png)

*Picture 2: Classified Information Handling*

- **Confidential** documents can be sent using **USPS First Class Mail**.
- **Secret and Top Secret** materials require **secure methods**, such as the **Defense Courier Service**.
- **Improper handling or disclosure** can result in severe legal consequences, including **revocation of security access** or criminal charges.

### CUI Marking and Legacy Classifications

The **DoD has replaced older labels like FOUO (For Official Use Only), SBU (Sensitive But Unclassified), and LES (Law Enforcement Sensitive**) with **Controlled Unclassified Information (CUI**) to improve consistency in safeguarding sensitive data.

This refresher training covers:

- **How to properly mark CUI** using a **Designation Indicator Block**.
- **Steps to update legacy-marked materials** to meet current **CUI standards**.
- **When and how to redact FOUO-marked documents** before sharing them outside the DoD.

### Security Protocols and Physical Safeguards

In addition to digital security, the training **highlights the physical protection of classified information** to prevent unauthorized access. Key best practices include:

- **Storing classified materials in secure storage containers and restricted areas** to ensure proper protection.
- **Limiting access** to only those with a "**need-to-know**" to reduce exposure risks.
- **Confirming security authorizations** through the **SF 312 (Classified Information Nondisclosure Agreement**) before granting access.

To explore the best security awareness training options available, check out the Keepnet guide on [Top Security Awareness Training Solutions (2026)](https://keepnetlabs.com/blog/top-security-awareness-training-solutions) for insights on the most effective tools to enhance your organization's security posture.

## How to Pass the DoD Security Awareness Refresher

The **DoD Annual Security Awareness Refresher** is an online course offered by the **Center for Development of Security Excellence (CDSE**). To earn a certificate of completion, participants must score at least **75**% on either the pre-test or post-test. Since the course does **not save progress**, it's essential to be well-prepared and complete it in one session.

## Tips for 2026: How to Succeed in the DoD Security Awareness Refresher

To successfully complete the **DoD Security Awareness Refresher**, it's important to understand key security protocols and be prepared for the assessment.

- **Verify your security authorization** - Check your **SF 312** ([Classified Information Nondisclosure Agreement](https://www.gsa.gov/system/files/2024-06/SF312-23.pdf)) to confirm you are approved to handle classified information.
- **Learn CUI marking rules** - Understand how to properly label and protect [Controlled Unclassified Information (CUI)](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) according to **DoD policies**.
- **Know the transition from legacy markings** - Be aware of how older labels like **FOUO (For Official Use Only), SBU (Sensitive But Unclassified), and LES (Law Enforcement Sensitive**) have been replaced by **CUI**.
- **Review secure transmission procedures** - Study the correct methods for **sending, storing, and disposing of classified materials** to prevent security breaches.

By following these steps, you’ll reinforce your security knowledge and ensure compliance with DoD regulations.

## The Role of Security Awareness in Protecting National Security

The **DoD Annual Security Awareness Refresher** is more than a compliance requirement. It is**critical** for protecting **classified and CUI-marked information**. Mishandling sensitive data can result in **security breaches, legal consequences, and threats to national security**.

As **cyber threats and insider risks** continue to evolve, ongoing security awareness training is critical. This refresher ensures that **military personnel, government employees, and contractors** fully understand their responsibilities in safeguarding **classified materials and CUI**.

By prioritizing **security education**, the **DoD** strengthens its defenses and prevents **unauthorized access to critical information**.

To further enhance your organization's **security awareness and risk preparedness**, explore [Keepnet’s Adaptive Security Awareness Training](https://keepnetlabs.com/products/security-awareness-training). With **11,000+ training materials from 12 content providers in 61 languages (as of 19 October 2026**), this program offers **personalized sessions** tailored to your team's cybersecurity gaps and skill levels.&#x20;

Video: <https://www.youtube.com/watch?v=klvz_ciAu0A>

## Sources

- [NIST SP 800-171 Rev. 2 (CUI protection)](https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final)
- [CISA - Recognize and report phishing](https://www.cisa.gov/secure-our-world/recognize-and-report-phishing)
- [CISA - Cybersecurity best practices](https://www.cisa.gov/topics/cybersecurity-best-practices)

## Further reading

- [Cybersecurity Awareness Training](https://keepnetlabs.com/products/security-awareness-training): Program design patterns that complement mandatory refreshers.
- [Compliance Frameworks Guide](https://keepnetlabs.com/blog/the-ultimate-guide-to-security-awareness-compliance-requirements-frameworks-and-best-practices): Align workforce training with audit and regulatory expectations.

## Frequently Asked Questions

### What is the DoD Annual Security Awareness Refresher?

It is mandatory annual training for DoD personnel and contractors with access to classified or CUI. It reinforces marking, transmission, physical security, insider threat, and cybersecurity expectations aligned with current policy.

### Who must complete the DoD security awareness refresher?

Military members, civilian employees, and cleared contractors who handle classified information or CUI must complete it each year to maintain access and compliance.

### How long does the refresher take to complete?

Most participants finish in roughly 25-30 minutes. Passing thresholds (often 75% or higher on assessments) are required for certificate issuance.

### Can the DoD refresher be completed online?

Yes. Approved online modules are common, but sessions may need to be completed in one sitting depending on the platform configuration.

### What topics are covered in the 2026 refresher cycle?

Typical modules include classified handling, CUI marking, insider threat indicators, secure transmission, physical security, and incident reporting responsibilities.

### What happens if someone fails to complete the refresher?

Incomplete training can lead to suspended system access, clearance issues, or disciplinary action. Operationally, untrained personnel increase accidental disclosure and insider risk.
