Just-in-time training
Just-in-time training provides focused guidance close to the moment someone needs it, such as during a task or immediately after an action in a security exercise.
The timing connects the lesson to the action
A short explanation after a simulated phishing interaction is one example. Microsoft documents customizable landing pages shown when someone opens a simulation payload. A team can use that space to explain the message and its warning signs.
The term describes timing, not a guaranteed teaching method. A brief reminder, a worked explanation, and an assigned course are different experiences even if they are triggered by the same event.
This is unrelated to just-in-time access, which concerns granting access when it is needed. A training prompt does not grant or revoke a permission.
Explain the next useful action
Give enough context for the learner to understand the decision. “You clicked” says less than explaining which destination was unexpected and how to report the message. For a support workflow, a timely reminder could point to the approved verification route when the caller cannot use their usual method.
Put the relevant instruction where the person can use it. In a support tool, that could mean a link to the approved verification procedure beside the account-change action.
Check what people can do afterward rather than treating a displayed page as proof of learning. NIST’s phishing research stresses the context and difficulty of simulation messages when interpreting results. A lower click rate on a different, easier message does not establish that the earlier intervention worked.