> For the complete documentation index, see [llms.txt](https://docs.guardware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.guardware.com/insight/getting-started/insight-partner-training-course-90-minutest-to-th.md). # INSIGHT Partner Training Course -90 Minutest to th **Total duration:** 1.5 hours * **Session 1:** Platform overview and deployment essentials — 20 minutes * **Break:** 15 minutes * **Session 2:** Policies, risk logic, and core configuration — 20 minutes * **Break:** 15 minutes * **Session 3:** Dashboards, reporting, and Q\&A — 20 minutes ### What partners should understand by the end * How INSIGHT is deployed across endpoints and Microsoft 365. * How policies, organisation settings, and risk definitions shape monitoring. * How to review activity in dashboards and use reports for follow-up. ### Trainer preparation and demo environment checklist Before delivering the training, prepare and verify the following: * A reachable GuardWare Management Console URL. * One working admin account with 2FA completed. * At least one online endpoint with the INSIGHT agen t installed. * At least one visible user in **INSIGHT > End Users**. * One configured user policy. * Risk definitions configured for the main monitored categories. * Enough activity data to demonstrate dashboard drill-downs and reports. * Microsoft 365 integration configured, or screenshots prepared, if Exchange Online or SharePoint Online monitoring will be shown. * One demo endpoint with **INSIGHT Status Monitor** available. ### Session 1: Platform overview and deployment essentials **Duration:** 20 minutes #### Session goal Give partners a clear view of what INSIGHT monitors, how data reaches the console, and how to confirm the platform is working. #### 1. Product overview - 5 minutes Cover the core INSIGHT flow. Explain the main components: * GuardWare Management Console. * Windows endpoints running the INSIGHT agent. * Exchange Online and SharePoint Online through Cloud Monitor. For reference, use [Introduction to INSIGHT](/insight/about/introduction-to-insight.md). #### 2. Access and Microsoft 365 setup — 5 minutes Show the standard admin access flow: * Sign in to the Management Console. * Complete 2FA if prompted. * Connect Microsoft 365 when cloud monitoring is in scope. Then show what the integration enables: * Exchange monitoring. * SharePoint monitoring. * Cloud sync visibility. #### 3. Agent install and validation — 10 minutes Walk through the deployment path: * **Resources > Agent Download**. * Download and install the INSIGHT agent. * Confirm the device appears in **INSIGHT > Devices**. * Confirm the user appears in **INSIGHT > End Users**. * Use **INSIGHT Status Monitor** to verify health and settings. Call out the key checks: * Device and user name. * Last online time. * Assigned setting. * Agent status. For reference, use [INSIGHT Devices](/insight/users-and-devices/insight-devices.md), [INSIGHT Users](/insight/users-and-devices/insight-users.md), and [INSIGHT Status Monitor](/insight/dashboard/insight-status-monitor.md). #### Demo outcomes By the end of Session 1, partners should have seen: * How INSIGHT is structured. * How cloud monitoring is connected. * How the agent is installed and validated. ### Session 2: Policies, risk logic, and core configuration **Duration:** 20 minutes #### Session goal Show how INSIGHT decides what to monitor and how severity is applied. #### 1. Configuration model overview — 5 minutes Start with the relationship between the main configuration areas: * **Organisation Settings** define the monitoring context. * **User Policies** define monitored behaviour. * **Risk Definitions** assign severity. * **Advanced Settings** control endpoint behaviour. #### 2. Organisation Settings and User Policies — 10 minutes Show the highest-value settings first: * Websites and applications. * Email domains and trusted emails. * USB and printer context. * Data type controls inside a user policy. Then show a simple policy example: * Monitor AI website uploads. * Warn on sensitive email attachments. * Block selected transfers to storage media. For reference, use [Organisation Settings](/insight/settings/organisation-settings.md) and [User Policies](/insight/policies/user-policies.md). #### 3. Risk Definitions and applying changes — 5 minutes Show how risk is assigned to monitored activities. Explain why this matters: * Dashboards become easier to prioritise. * Reports become more meaningful. * Teams can align alerts with business risk. Then show how to verify that changes have applied on the endpoint. For reference, use [Risk Definitions](/insight/settings/risk-definitions.md) and [INSIGHT Status Monitor](/insight/dashboard/insight-status-monitor.md). #### Demo outcomes By the end of Session 2, partners should understand: * How the main INSIGHT settings fit together. * How to create a simple user policy. * How risk levels affect visibility. ### Session 3: Dashboards, reporting, and Q\&A **Duration:** 20 minutes #### Session goal Show partners how to review activity quickly and explain the main follow-up options. #### 1. Dashboard overview — 10 minutes Open **INSIGHT > Dashboard** and focus on the core views: * **Risk Summary**. * **Data Type Risks**. * **AI Usage Risks**. * **Behaviour Risks**. * **SharePoint Risks** when cloud monitoring is enabled. Show how to use: * Filters. * Widget drill-down. * User, device, and time-based views. For reference, use [INSIGHT Dashboard](/insight/dashboard/insight-dashboard.md). #### 2. Reporting and awareness workflows — 5 minutes Cover the fastest reporting paths: * **Risk Summary** for scheduled admin visibility. * **Cyber Awareness** for end-user guidance. Explain when each is useful: * Risk Summary for oversight. * Cyber Awareness for behaviour change. For reference, use [Cyber Awareness](/insight/reporting/cyber-awareness-report.md). #### 3. Q\&A and operational close — 5 minutes Finish with the standard health checks: * Device online status. * Last cloud sync. * Status Monitor for endpoint diagnostics. Position this as the first response when a customer reports missing data or stale devices. #### Demo outcomes By the end of Session 3, partners should be able to: * Navigate the main dashboard views. * Drill into core incidents. * Explain the role of Risk Summary and Cyber Awareness. * Perform basic health checks. {% hint style="info" %} If time is tight, use one prepared dashboard path and one prepared report instead of multiple live examples. {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.guardware.com/insight/getting-started/insight-partner-training-course-90-minutest-to-th.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.