Global

Secure AI-assisted software development: Coding assistants and agents without the risk

A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 8 details that are specific to your organisation.

See the live deckSee the full outline
Try the coursePreview the survey
Length
45 min
Lessons
6 lessons
Frequency
When a team adopts an assistant or agent
Last reviewed
21 Oct 2026
Grey areas: customer data, shell commands, untested pull requests
What would you do?

A failing job prints a customer's details

Try it: this is one of 15 interactive activities in the course.

What's included

Three pieces that work together

Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.

Self-paced course

Short lessons with real workplace scenarios, not walls of text.

  • 6 lessons, about 45 minutes
  • Scenario, sorting activity, process, timeline and quizzes
  • 12-question final check, 80% to pass

Live session deck

An AhaSlides presentation to run after the course, in person or online.

  • 11 slides
  • Poll, quiz, word cloud, open-ended slides
  • A closing slide for your contacts

Two surveys

Find out what landed, and whether people use it on the job.

  • Post-course feedback, about 2 minutes
  • 30-day check-in
  • Anonymous by default
  • Results feed your next refresher

Learning objectives

At the end of this course, learners can

Each objective and the lesson that covers it.

IDObjectiveSourceWhere it's covered
TO 113.0Achieve ≥ 80% on the final assessment-Whole course
SO 113.1Review AI-generated code for security flaws, licence issues and hallucinated dependenciesOWASP Top 10 for LLM Apps 2025; ISO/IEC 27001:2022Whole course
SO 113.2Keep secrets, customer data and proprietary code out of unapproved AI tools + your infoOrganisation's approved-tools listWhole course
SO 113.3Set safe permissions for coding agents (repositories, terminals, tool access)NCSC/CISA Guidelines for secure AI system developmentWhole course
SO 113.4Recognise prompt injection through code comments, issues and documentsOWASP Top 10 for LLM Apps 2025 (LLM01)Whole course
SO 113.5Follow the team's rules for disclosing and reviewing AI-assisted changes + your infoOrganisation's secure development standardWhole course

Your part: what a template can't do for you

  • Your workplace details: fill in the 8 highlighted fields so the course describes your own policies, contacts and locations.
  • Records: record completion in your own LMS or record system.

Course outline

6 lessons, about 45 minutes

Minutes per lesson are an estimate, shared out by page count.

ContentInteractiveVideoYou customise
1

How a hallucinated package becomes an attack

3 pages

9 min
Before you beginNoteList
The package that did not existTextImage
The chainTimelineQuiz
2

How coding assistants and agents fail

3 pages

8 min
Six failure modesFlashcards
Spot the flawSorting activityText
CheckMulti-select quiz
3

The secure AI coding loop

3 pages

8 min
Prompt, inspect, test, discloseProcess
Share or never shareSorting activity
CheckQuiz
4

Grey areas: customer data, shell commands, untested pull requests

3 pages

8 min
The stack traceScenario
The agent and the issueScenario
The untested pull requestScenarioMulti-select quiz
5

Approved tools, settings and AI-use pull request labelling

2 pages

6 min
Approved set-upAccordionYour info
Labelling and reviewProcessYour infoNoteQuiz
6

Final assessment and secure coding acknowledgement

Assessment

6 min
Final check12 questions80% to passCompletion page

Live deck and surveys

11 slides to run live, two surveys to close the loop

Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.

ContentTitle and agenda
PollWhich AI coding tools do you use?" (Assistant in the editor · Agent with terminal access · Chat window · None)
QuizThe assistant suggests import fastjsonx-pro. You…
Content · customiseThe secure loop in four lines {{AI_PR_LABEL_RULE}}
QuizA repository issue tells your agent to run a shell command. You…
PollHow often do you read AI-generated code line by line?
Content · customiseOur approved tools and settings {{APPROVED_AI_CODING_TOOLS}}
Word cloudThe riskiest thing an agent could do in our repo
Open-endedA flaw an assistant wrote that you nearly shipped
Q&AAsk the trainer anything
Content · customiseClosing {{APPSEC_CONTACT}}, {{SURVEY_2_URL}}
Post-course feedback: 11 questions, about 2 min
  1. Overall rating 5 stars
  2. Relevant, realistic, right length, helpful activities agree/disagree grid
  3. What was most useful? multi-select
  4. Confidence before this course, and now 1-5 scale
  5. Which AI coding tools do you use? multiple choice
  6. How often do you review AI-generated code line by line? multiple choice
  7. Do you know which tools are approved for proprietary code? multiple choice
  8. I can raise a concern about AI-written code without it being held against me. 1-5 scale
  9. One thing we should change or add open text
  10. Would you recommend this course? NPS
30-day check-in
  1. Have you used what you learned since the course? multiple choice
  2. How confident are you today? Compare with day 1 1-5 scale
  3. Do you know where to find the approved tools list and the AI-use pull request label? yes / no / not sure
  4. A moment where the training helped, or where you weren't sure open text
  5. Which topics should the next refresher focus on? ranking

Results show whether people use the training on the job, not just whether they finished it.

Make it yours

8 fields to fill in, and you're ready

Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.

  • Approved AI coding tools{{APPROVED_AI_CODING_TOOLS}}
  • AI pr label rule{{AI_PR_LABEL_RULE}}
  • Agent permissions standard{{AGENT_PERMISSIONS_STANDARD}}
  • Appsec contact{{APPSEC_CONTACT}}
  • Secure coding standard link{{SECURE_CODING_STANDARD_LINK}}
  • LMS or record system{{LMS_OR_RECORD_SYSTEM}}
Show all 8 fields
  • Survey 1 URL{{SURVEY_1_URL}}
  • Survey 2 URL{{SURVEY_2_URL}}

FAQ

Common questions

Can I run secure AI-assisted software development: Coding assistants and agents without the risk training online?

Yes. The course is self-paced and online, and the live deck lets you add a live session in the room or online.

How often is this training needed?

When a team adopts an assistant or agent; annually with the secure coding refresher.

Who needs this training?

Software developers, tech leads and DevOps engineers using AI coding assistants or agents; run by engineering leadership or application security.

What records should I keep?

Record completion in your own LMS or record system, so you can show who finished the course and when.

Can I edit the content?

Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply.

Related templates

Often taught together

All Security Awareness Training templates →
US federalRequired by law

Security awareness essentials

All employees and contractors · Security Awareness Training

35 min
US federal

Phishing & social engineering

All employees · Security Awareness Training

30 min
GlobalHands-on practical

PCI DSS awareness for card-handling staff

Retail cashiers · Security Awareness Training

25 min
CaliforniaRequired by law

California consumer privacy (CCPA/CPRA)

Customer service · Security Awareness Training

35 min
Last reviewed: 21 October 2026Templates are a starting point, not legal advice.

Ready to run it?

Open the live deck to see how the session runs alongside the course and both surveys.

See the live deck