Cofense LMS vs. SANS Security Awareness Training

LMS is a more appropriate choice to be used if the organization is large and has multiple verticals where the trainings differ to a great etent from vertical to another vertical. However if the company is a small scale org with limited hierarchy, any open source portal is enough to serve the purpose.

Incentivized

SANS Security Awareness Training program would be well suited for a large organization that needs to develop multiple training programs with different courses based on the roles of the end users. It seemed a bit difficult at times to achieve simple setup processes because of the configurations tailored to larger, more complex organizations.

Incentivized

• Training modules: developed Using Learning Science Principles
• Story Based Environment
• Learn by doing

Incentivized

• Variety of cyber threat videos and presentations
• Web based and mobile access to the platform
• Easy to manage administrator access to configure the training sessions

Incentivized

• UI can be more interactive
• Segregating the users in different groups can be further automated via AD details
• The end user mobile notification feature should be there rather than only mail.

Incentivized

• Mass import of users was a bit confusing
• User interface was sometimes not intuitive
• Ability to upload custom content was difficult to use

Incentivized

Cofense LMS works well at our environment due to it well know security awareness training without any complications. Ease to get support documentations & end users feedback. While in MetaCompliance Support & documentation was not that easy for end users.

Incentivized

We actually are currently migrating to Proofpoint Security Awareness Training because of its integration with the Proofpoint email filter. This will allow us to target specific users who are clicking on bad emails with specific training material. We have used KnowBe4 in the past as well, but it was rather costly compared to SANS Security Awareness Training and Proofpoint. SANS Security Awareness Training seems to be the least easy-to-use interface from an administrative perspective compared to the other two.

Incentivized

• Trainings made user more aware of the security attacks they are vulnerable to
• Strengthened the overall security posture of the company
• Detterent control as incase the the personnel are not able to finish off their training, it is followed by HR action.

Incentivized

• Positive impact knowing we are educating our staff from phishing and potential cyber criminals
• Considering the potential for bad actors infiltrating our network, this is a small expense
• Pricing based on actual end users, worth the investment

Incentivized