Ensure user has actually reviewed policies and security training videos

Feedback on the policy review and training, an employee doesn't actually have to read the policies or watch the videos, they can just mark them off as reviewed. There should be some more controls around ensuring the employee has actually done the review of the documents or played the videos.