does tweeting abstractly about mandatory information security training violate information security policies?

asking for a friend.