Cornerstone Galaxy is a cloud-based application for talent management. Cornerstone offers suites for recruiting, training, performance monitoring and planning, learning, and HR data management. It is scaled for enterprises.
N/A
Proofpoint Security Awareness Training
Score10 out of 10
N/A
Proofpoint Security Awareness Training (formerly ThreatSim from Wombat Security) is a cloud-based training platform that simulates threat scenarios (e.g. phishing) and also provides assessment testing developed by Wombat Technologies, which was acquired by Proofpoint in March 2018.
Cornerstone Galaxy is a good solution for larger companies that focus on training and want to offer a variety of options to their employees and departments. It is highly customizable. It does require a tech savvy team to set-up, and maintain. This is not a set-it-and-forget-it system. From an LMS perspective, it wouldn't be my top choice for employees who only need a mobile-friendly approach.
Perfect for regular (monthly) training of staff versus a "one and done" annual assignment on Cyber Security. Allows for a greater number of topics to be covered and for creating a "culture" of security awareness among all Staff throughout the entire company. NOT a replacement for IT Security Certifications amongst your technical staff (CISSPs & GSLCs on staff are a must have). Your Proofpoint Account Rep does most of the heavy lifting, but the program still requires "care and feeding" (resources) within your organization - preparing monthly user lists for training assignments and preparing reports for leadership on participation & progress
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Ability to provide multiple customizable access roles from general end user to full system admin and anything in between
Powerful reporting system in the LMS to track a plethora of data points within the platform (user data, training information, transcript information)
Great options to customize the look and feel of your "home page" to best meet your company's needs and goals.
Ability to customize the transcript view for learners (i.e. when Completed training will move to their Archived transcript, what to do with Inactive training on transcripts)
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Sometimes finding the right answer to your support question can be a bit more difficult than it should be.
I would like to see more OSHA related courses.
At times, the administrative interface seems to need to be updated, but the tradeoff honestly might be the absolute rock-solid stability of the platform.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
The lack of a user rating on "cyber risk" is proving to be an immense difficulty. As we are looking at how to better hold our employees accountable as well as provide increased learning opportunities for those who need it most, it is becoming cumbersome--especially given the fact this is starting to become the standard for Security Awareness companies. The lack of this is resulting in a manual process vs being able to automate and moderate, thus taking up time and resources, which are always at a scarcity. It can also be cumbersome to look across the tools to see how a particular user is doing, vs being able to view all of their data in one space.
If you are a marketer, the editors for the Phishing Templates and Teachable Moments are quite frustrating. They feel out of date and clunky, as well as not featuring an auto-save, so you could lose the templates you are building. At this point, I have actually started to work in other email creation editors and learning HTML, to better customize and then moving all of the code into the editor. It has thus far proven to be less of a headache. I also do not believe the average user is working on branding their program, creating consistency for easy of navigation, and including additional resources in their teachable moments in the way we currently are. However, as more social science backgrounds continue to enter security awareness, I believe this will move towards the norm.
Some of the reporting numbers for Simulated Phishing could be better. For example, telling me how many people acknowledged the teachable moment out of the full email campaign is less meaningful than knowing how many people acknowledged it, from those who actually triggered/were shown the teachable moment.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
As long as pricing stays reasonable, we will likely stay with Cornerstone for at least one more contract renewal. It would be a large task to migrate all of our content to a new system. However, the LMS landscape is diversifying with new startups that are showing some real innovation.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
The package/service as a whole is incredibly helpful
The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Easy to use, easy to learn, lots of support during the learning process. There are a few parts of the system we don't use and I'm hesitant to begin using because other clients have said they're difficult and cumbersome (certifications) or outdated (libraries)
Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I haven't really had any major availability problems. The service is practically impeccable but it is true that at times, due to server and latency problems, the application has been slower. But these have been specific issues that have resolved themselves.
I haven't seen many issues at all with load times. Sometimes learning assignments will take longer then expected but it is still reasonable. They have taken great effort over the last couple years to speed things up like reports and search results so I expect that effort to continue in the coming year.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Its always important to have support when you are facing problems and when you are the main admin of the organization. Cornerstone Support is very supporting when you have not found the answer in the help guide. its very useful to have a team support to guide you.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Proofpoint support has always been above average. A lot of companies provide a customer service manager for your account but few have proved as connected as Proofpoint. The CSM was able to give us a good start with the product and checked in periodically. I found them always helpful with any questions and very knowledgeable about the platform.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
we use also to admin all our training in person events and sessions. Its easy to admin this kind of trainings and automatize some processes we have. Also de user experience and the integration with other systems helps to the employees to use more. All modules integrated oriented to develop people is the principal reason to have CSOD. The training administration is very complete and allows to automate many processes.
The online modules are pretty good. You can access them at any time, which we have done. You learn a lot in the beginning, but having the ability to retake short lessons when you are working on those items was very helpful.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
The implementation was pretty difficult. We felt they (Cornerstone) didn’t properly allocate the resources to complete our implementation in the timetable we wanted.
For example, we worked on Workday and SSO integrations - work that we had specifically contracted for in advance. When we were ready to work on that project, they didn’t have the people ready to help us, so it took a lot longer than necessary. That was my biggest pain point.
The implementation approach we went with was a self-led implementation. We would speak to the implementation manager once per week, and self-trained. We met with implementation manager to discuss issues, review things that we’d learned for 1 hour. We found that wasn’t enough. Other things would come up outside that one hour window that we couldn’t get answers to. We didn’t have anyone to ask about those things and we had to wait to ask during our weekly meeting.
The advantage of the self-led implementation approach was that it was really inexpensive – significantly less than the implementation cost for the other systems that we looked at. I also liked that we could pace ourselves. There were however big roadblocks. We would have to make sure the right resources were available. We had an implementation/project manager with a lot of experience and felt that the person was knowledgeable but missed on a few things.
In hindsight, I would still go with the self-led implementation, but knowing what I know now, I would ask for the integration person to be available more. I would work that into the contract. With single sign-on, we needed deep linking to build direct links through a Single Sign-On tool, e.g. when someone gets an email, it directs them to training. But it has to go through SSO to get them to the correct link. Deep linking wasn’t turned on in our system and they had to activate it. We encountered little things like that – sequencing pre-requisites which were problematic. We tried to troubleshoot ourselves.
I recommend you consider contracting for some extra implementation hours and determine when they are going to be available. Work it into the contract that you have the ability to call tech support during implementation. In addition to weekly implementation meetings, they have technical webexes – 4 every week, but 2 didn’t apply to us – one as we were using SSO. The challenge is they were not always relevant – we had specific questions that didn’t fall into those categories
The user experience is a lot better than using SumTotal as an admin CSOD makes working easy. Without having workarounds. Reporting is a lot better than both platforms. Reporting in CSOD is complex however easy to manage and create when you understand the data points collected
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
All three products have the pros and cons. Since we use other Proofpoint products, TAP, TRAP, etc. the integration with PSAT is much better. The other products do not integrate with TRAP nearly as well as PSAT.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It is important to be familiar with the terms and annual increases in licenses and other aspects of the contract. I recommend analyzing this from the beginning and the permanence is relevant because Cornerstone updates its modules and brings out new features that may allow you to leave a module to acquire another
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
As I have said before, I have no doubt that the services of the Cornerstone sales people were very good. In particular, our salesperson spent a lot of time in contact with us to make the process go smoothly. Perhaps being a large company in some cases the times were slowed down but it is something normal to take into account.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Positively made our staff more aware of current phishing threats.
Gives our staff a sense of accomplishment when they recognize a phishing email.
Helped reinforce our values in the mandatory Information Security training each employee takes (for example, they are already aware of the signs of a phishing email before they take the training).
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
