Quick Answer
Generally yes. But insurers ask for completion rates and phishing simulation results, not whether training is available — so "we have a platform" isn't the answer the question is looking for.
Completion Rate Is the Metric
Buying a training product is easy. Getting everyone through it is the part underwriters ask about.
Pull your actual figures before answering: what percentage of staff completed training in the last twelve months, and when. A programme with 95% completion beats a more sophisticated one sitting at 40%, and the number is what goes on the form.
Phishing Simulations Get Asked About Specifically
Many questionnaires ask whether you run simulated phishing campaigns and what your click rate is. It's treated as evidence the training works rather than just existing.
If you run them, know your numbers. A declining click rate over time is a strong answer; a single campaign with no follow-up isn't.
Annual Onboarding Training Doesn't Count
The common position — training once when someone joins, then nothing — generally won't satisfy the question. Insurers look for ongoing programmes covering all staff, not just new starters and not just IT.
Reporting Culture Matters More Than Detection
Worth building into whatever you run: staff need to know that reporting a mistake quickly is expected and won't get them in trouble. The employee who clicked and says so immediately is your earliest warning. The one who hides it costs you hours.
Example Scenario
A 75-person financial services firm was asked at renewal whether staff received regular training and phishing simulations. Technical controls were solid, but training had been inconsistent. PureStack put a structured programme in place with simulation campaigns and ongoing education, giving the firm completion figures to report.
How PureStack Evidences Your Training Programme
We run training that people actually complete, deliver phishing simulations, and produce the completion and click-rate reporting your insurer asks for.