Secure Code Warrior launches AI literacy course for staff

Secure Code Warrior has launched an AI literacy programme for non-developer employees, aimed at helping organisations prepare staff for responsible AI use at work.

Called Citizen AI, the programme is designed for workers in marketing, finance, human resources and operations who are increasingly using AI tools in day-to-day tasks.

The training focuses on judgement, risk awareness and responsible-use habits as businesses extend AI adoption beyond software teams and security specialists.

A Kyndryl report cited by Secure Code Warrior found a gap between AI deployment and workforce preparedness. According to the research, 57% of organisations have AI embedded in core business processes or deployed broadly, while 23% believe their workforces are ready for it.

The launch reflects a broader shift in how companies approach AI governance. Many programmes have focused on policy, platform controls and technical oversight, but employees in non-technical roles are already sharing data with AI tools, building automations and acting on machine-generated output.

That can create risks even when formal controls are in place. Employees may expose sensitive information, grant excessive permissions or rely on inaccurate responses without fully understanding the consequences in the context of their roles.

Workplace focus

The curriculum uses practical learning, videos and interactive exercises based on workplace scenarios. It is designed around the AI tools, workflows and automations employees are already using, rather than broader theory about the technology.

Initial courses cover how AI automations work, how to create prompts and check outputs, how to manage AI artefacts and automations, and the risks linked to so-called vibe-coding.

Learners are shown how to build AI workflows more safely and understand how connected AI systems are structured. The prompting training covers hallucinations, why they happen and how staff can assess inaccuracies, including the use of provenance prompting to check where claims come from.

Other modules examine risks tied to third-party automations, hidden dependencies, and the sharing of AI projects, conversations and related materials. The programme also addresses security issues in websites and applications created through vibe-coding, including cases where technical expertise is needed to make projects safe.

The learning tracks are tailored for non-developer audiences and will be updated as AI use evolves inside organisations. Additional courses and modules are also planned.

Broader strategy

Citizen AI sits alongside the company's wider work on AI security and governance. That includes training for developers who use AI coding tools, review machine-generated code and build AI applications, as well as monitoring intended to give organisations visibility into how AI tools are used across the software development lifecycle.

Secure Code Warrior is seeking to extend security education beyond technical teams to the wider employee base as AI tools become embedded in routine office work. The move reflects growing concern among employers that AI risk is no longer confined to software creation or specialist data teams.

Matias Madou, Co-Founder and Chief Technology Officer, said the launch is intended to address that shift.

"For years, organizations have approached AI readiness primarily through a technical view, with role-based risk use cases largely not considered beyond the development team," said Madou, Co-Founder and Chief Technology Officer, Secure Code Warrior.

He said many employees are already using AI without formal preparation for safe use in their roles.

"Employees across business functions are already using AI, but the main question is whether they've been trained to use it well. With Citizen AI, we're helping organizations move beyond policies and awareness to build the responsible habits employees need to use AI safely in the real world," Madou said.

The offering points to a commercial opportunity for training providers as companies grapple with the operational consequences of broad AI adoption. While large language models and automation tools promise productivity gains, employers are also facing questions about data handling, access control, reliability and accountability when non-technical staff use them in routine work.

For vendors in the security and training market, that creates demand for programmes focused less on code and more on user behaviour. Secure Code Warrior's new course set reflects that shift, targeting the point where governance rules meet daily employee decisions.

The programme is available now for organisations seeking structured training for non-developer teams.