Cofense PhishMe is a cyber threat and phishing simulator meant to be of use in training employees to be wary against threats and also to gain information about general employee threat knowledge and preparedness. A free trial is available for small business.
N/A
PiiQ by Cornerstone (discontinued)
Score8.7 out of 10
N/A
Cornerstone’s PiiQ was an SMB offering that included core learning management and performance management systems, based on Sonar6 which was acquired by Cornerstone in 2012, and ultimately discontinued in 2022.
Cofense PhishMe is an excellent solution for scenarios where it will be sold as a managed service. I believe that PhishMe is too expensive for many clients and instead would benefit from the economies of scale where an MSSP sells it as part of a whole service, which offers the analysts and reporting included. PhishMe is excellent for training and awareness of Phishing, but shouldn't replace mandatory training for new joiners or yearly refreshers, it should only be used as an additional training option.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
It gives clear-cut segregation of different parts of an email, header, text and HTML body, URL, attachments, HTML preview and some analytical insight like "similar reports." This distinctive approach actually helps reduce data overload during an analysis.
The URLs captured here pass through an automatic reputation check [in our case VirusTotal] and add a tag of the reputation. If it is a well-known bad URL the tag helps us take the decision fast.
For creating automation rules on the reported emails the "Recipes" section is really helpful. We can create easy recipes [or rules ] to handle a huge flow of reports and also we can create more sophisticated rules depending on the Cyber intelligence feed to catch the really bad currently less known attack attempts by malicious emails.
The "Threat Indicators" section is also useful to use as a threat intelligence source to check the URLs for their maliciousness.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Enables employees to draft work goals and collaborate with their supervisors on a final version - improves mutual understanding right up front.
Combines performance goal ratings with competency ratings and provides a blended score. Simplifies the goal weighting so you don't have to do any calculations.
9-box matrix provides useful definitions and descriptions so managers can prepare development notes or plans for individual employees.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Would be good to have have a virtual "top level" (eg board) user built in to allow senior execs without a direct manager to be able to be set up with KPIs instead of having to create a dummy user
Reports have difficulty downloading if pop ups disabled or in some browser environments
When competencies are updated while a cycle is open, any changes don't effect that open cycle but only future ones. Would be nice to be able to have the option to apply changes to existing "open" cycles
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
It's not that CSB isn't a decent performance management system, but we have decided to go with just one vendor (Workday) for an HRIS/performance management/payroll system so we can directly relate pay to performance. We are more interested in having just one system that "talks" to the other pieces instead of having to work with several vendors. It reduces the hassle of having to communicate with different support teams, having different contracts, and so on.
Its built with UX in mind and is aimed at non-tech people, to ensure that almost everyone can run the campaign. But if we go deeper - sometimes you will need an HTML editor or support in order to figure out some advanced edits you might want to add in your scenarios.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
There are specific things within the goals and competencies that are user-friendly. For example, the rating slider isn't great in my opinion. You can slide in between ratings which can create some odd scoring (if you use scoring). It seems a better solution would be a drop down where you select your rating. There are also some glitches in the system and have been told Cornerstone is aware of them but are focused on delivering new features. There are workarounds, but that doesn't seem to be a great answer.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
The saving process slows it down. It doesn’t auto save. If you leave a page, it will sometimes warn you, but not always. When you hit the save button, a window pops up that says creating/saving packets. It feels very archaic.
I have not had to use their support for pretty much anything. The software works well, and is very intuitive. I would imagine their support would be rather basic as there is not too much that can go wrong with a report phishing button, and if it were I would probably consider a different software.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
My assistant could better address this issue. My perception is that there is not immediate assistance, and that there can be a wait for help. That is not a negative, just a perception. I have not used support in two years.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I think we could have done a better job of rolling out the tool to our managers. We were under a tight timeline. In the training, we showed them everything and said go do it by this date. Looking back, I would have done it in pieces: for example, 2 weeks to write goals, 2 weeks to get sign-off from direct reports. I just let them go at it. Since then we’ve moved to agile development environment and are applying the technique to everything. In future would only do through change sprint. It is a big change I didn’t take it seriously enough.
I had a team of 3 project managing. You need a champion from every department to make sure you’re getting it right and to make sure what’s happening is communicated. It’s not something you can do without input from department heads
Cofense PhishMe was the first choice for us as the user interface as well as their bundle package with Cofense Triage and Vision has helped the organisation to alleviate the overall security awareness posture. The other vendors did not provide a vast range of phishing scenarios as compared to Cofense PhishMe platform.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Lesson.ly has been great to work with but it is a very clear and simple, user-friendly system that anyone can pick up with very little training as it is self-explanatory. It also has a great mobile interface and lots of different features that are easy to add for the admin but really impactful for the user.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Recipes in the system are capable of handling almost 2x what an analyst does, which cuts down the efforts [of] an analyst and provides more time for accurate strategies.
With roughly 90% false positives coming through, the remaining 10% of true positives need as much attention as they can get for the full investigation and analysis.
1,500 or more phishing messages can come through in a given week and the amount of time/employees required to review this without a tool like Cofense is surely beyond [the] expected/anticipated budget.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's tool and it's only as good as the person wielding it. The investment in PiiQ was accompanied by a quarterly cadence and manager feedback training. We feel like our employees are given regular feedback and bonuses are tied to objective accomplishment.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
