Which steps are needed between SR-401-9D and SR402?

Hello,
I can’t recall what explained during SR-401 and I am in the process of setting up trainings in the next few months.
in order to be aligned with what requested by policies, I would like to make sure my trainings will match required steps:
would anybody remember this? how many hours of training, if 1 to 1 of group of people, if any evidence is to be sent and it could be just recorded or video recorded etc…
thanks in advance,

Umberto