Cornerstone’s PiiQ was an SMB offering that included core learning management and performance management systems, based on Sonar6 which was acquired by Cornerstone in 2012, and ultimately discontinued in 2022.
$8
per user per month
Proofpoint Security Awareness Training
Score10 out of 10
N/A
Proofpoint Security Awareness Training (formerly ThreatSim from Wombat Security) is a cloud-based training platform that simulates threat scenarios (e.g. phishing) and also provides assessment testing developed by Wombat Technologies, which was acquired by Proofpoint in March 2018.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Perfect for regular (monthly) training of staff versus a "one and done" annual assignment on Cyber Security. Allows for a greater number of topics to be covered and for creating a "culture" of security awareness among all Staff throughout the entire company. NOT a replacement for IT Security Certifications amongst your technical staff (CISSPs & GSLCs on staff are a must have). Your Proofpoint Account Rep does most of the heavy lifting, but the program still requires "care and feeding" (resources) within your organization - preparing monthly user lists for training assignments and preparing reports for leadership on participation & progress
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Enables employees to draft work goals and collaborate with their supervisors on a final version - improves mutual understanding right up front.
Combines performance goal ratings with competency ratings and provides a blended score. Simplifies the goal weighting so you don't have to do any calculations.
9-box matrix provides useful definitions and descriptions so managers can prepare development notes or plans for individual employees.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
Would be good to have have a virtual "top level" (eg board) user built in to allow senior execs without a direct manager to be able to be set up with KPIs instead of having to create a dummy user
Reports have difficulty downloading if pop ups disabled or in some browser environments
When competencies are updated while a cycle is open, any changes don't effect that open cycle but only future ones. Would be nice to be able to have the option to apply changes to existing "open" cycles
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
The lack of a user rating on "cyber risk" is proving to be an immense difficulty. As we are looking at how to better hold our employees accountable as well as provide increased learning opportunities for those who need it most, it is becoming cumbersome--especially given the fact this is starting to become the standard for Security Awareness companies. The lack of this is resulting in a manual process vs being able to automate and moderate, thus taking up time and resources, which are always at a scarcity. It can also be cumbersome to look across the tools to see how a particular user is doing, vs being able to view all of their data in one space.
If you are a marketer, the editors for the Phishing Templates and Teachable Moments are quite frustrating. They feel out of date and clunky, as well as not featuring an auto-save, so you could lose the templates you are building. At this point, I have actually started to work in other email creation editors and learning HTML, to better customize and then moving all of the code into the editor. It has thus far proven to be less of a headache. I also do not believe the average user is working on branding their program, creating consistency for easy of navigation, and including additional resources in their teachable moments in the way we currently are. However, as more social science backgrounds continue to enter security awareness, I believe this will move towards the norm.
Some of the reporting numbers for Simulated Phishing could be better. For example, telling me how many people acknowledged the teachable moment out of the full email campaign is less meaningful than knowing how many people acknowledged it, from those who actually triggered/were shown the teachable moment.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's not that CSB isn't a decent performance management system, but we have decided to go with just one vendor (Workday) for an HRIS/performance management/payroll system so we can directly relate pay to performance. We are more interested in having just one system that "talks" to the other pieces instead of having to work with several vendors. It reduces the hassle of having to communicate with different support teams, having different contracts, and so on.
We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
The package/service as a whole is incredibly helpful
The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
There are specific things within the goals and competencies that are user-friendly. For example, the rating slider isn't great in my opinion. You can slide in between ratings which can create some odd scoring (if you use scoring). It seems a better solution would be a drop down where you select your rating. There are also some glitches in the system and have been told Cornerstone is aware of them but are focused on delivering new features. There are workarounds, but that doesn't seem to be a great answer.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
The saving process slows it down. It doesn’t auto save. If you leave a page, it will sometimes warn you, but not always. When you hit the save button, a window pops up that says creating/saving packets. It feels very archaic.
My assistant could better address this issue. My perception is that there is not immediate assistance, and that there can be a wait for help. That is not a negative, just a perception. I have not used support in two years.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Proofpoint support has always been above average. A lot of companies provide a customer service manager for your account but few have proved as connected as Proofpoint. The CSM was able to give us a good start with the product and checked in periodically. I found them always helpful with any questions and very knowledgeable about the platform.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
I think we could have done a better job of rolling out the tool to our managers. We were under a tight timeline. In the training, we showed them everything and said go do it by this date. Looking back, I would have done it in pieces: for example, 2 weeks to write goals, 2 weeks to get sign-off from direct reports. I just let them go at it. Since then we’ve moved to agile development environment and are applying the technique to everything. In future would only do through change sprint. It is a big change I didn’t take it seriously enough.
I had a team of 3 project managing. You need a champion from every department to make sure you’re getting it right and to make sure what’s happening is communicated. It’s not something you can do without input from department heads
Lesson.ly has been great to work with but it is a very clear and simple, user-friendly system that anyone can pick up with very little training as it is self-explanatory. It also has a great mobile interface and lots of different features that are easy to add for the admin but really impactful for the user.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
All three products have the pros and cons. Since we use other Proofpoint products, TAP, TRAP, etc. the integration with PSAT is much better. The other products do not integrate with TRAP nearly as well as PSAT.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
It's tool and it's only as good as the person wielding it. The investment in PiiQ was accompanied by a quarterly cadence and manager feedback training. We feel like our employees are given regular feedback and bonuses are tied to objective accomplishment.
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. TR verified that a representative sample of customers was invited. More Info
Positively made our staff more aware of current phishing threats.
Gives our staff a sense of accomplishment when they recognize a phishing email.
Helped reinforce our values in the mandatory Information Security training each employee takes (for example, they are already aware of the signs of a phishing email before they take the training).
A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info
