Infosec IQ vs. Proofpoint Security Awareness Training

Infosec IQ stands out as an excellent solution for conducting recurrent trainings and running simulated phishing campaigns. The platform not only offers robust features but also provides prompt and reliable support to its users. This level of assistance ensures a smooth experience and helps address any questions or concerns that may arise during training or campaign execution.One notable advantage of Infosec IQ is its support for Single Sign-On (SSO) functionality. This feature enables users to access the platform seamlessly using their existing credentials, eliminating the need for separate login information. By integrating with an organization's existing authentication system, Infosec IQ simplifies user management and enhances security by leveraging established access controls.In summary, the strengths of Infosec IQ include its comprehensive training and simulated phishing capabilities, excellent support services, and the convenience of SSO integration. These features contribute to a more efficient and effective training experience, allowing organizations to strengthen their cybersecurity defenses while minimizing administrative burdens.

Incentivized

Perfect for regular (monthly) training of staff versus a "one and done" annual assignment on Cyber Security. Allows for a greater number of topics to be covered and for creating a "culture" of security awareness among all Staff throughout the entire company. NOT a replacement for IT Security Certifications amongst your technical staff (CISSPs & GSLCs on staff are a must have). Your Proofpoint Account Rep does most of the heavy lifting, but the program still requires "care and feeding" (resources) within your organization - preparing monthly user lists for training assignments and preparing reports for leadership on participation & progress

Incentivized

• The content for AwareEd training is robust and extensive. Many cybersecurity topics available for training material. As well as the ability to print promotional training sheets that can be displayed in break rooms, training rooms, hallways, etc.
• The built-in phishing simulation templates are great! Recently, Infosec IQ added a new category called "Catch of the Week" that has very realistic phishing simulations that are much more effective and great examples of the types of phishing scams being used today.
• Reporting works very well and provides information that can be shared with department managers so they can have visibility on how well their team members are meeting the cybersecurity training requirements.

• Proofpoint has a huge library of phishing emails to choose from. They add new examples every week.
• The training modules are fun and interactive and keep the user engaged.
• The posters, and downloadable materials are amazing and really give a great visual to support your security campaigns.
• The product is easy to use, and Proofpoint Support Staff are always available to help with any issues you have.

Incentivized

• Phishing simulation sending configurations can be complex and cumbersome.
• Reports and report options could be better. More canned reports and better data sorting & filtering.
• Some training modules can be difficult to complete on iPads, Android, or other tablets with no mouse.

Incentivized

• The lack of a user rating on "cyber risk" is proving to be an immense difficulty. As we are looking at how to better hold our employees accountable as well as provide increased learning opportunities for those who need it most, it is becoming cumbersome--especially given the fact this is starting to become the standard for Security Awareness companies. The lack of this is resulting in a manual process vs being able to automate and moderate, thus taking up time and resources, which are always at a scarcity. It can also be cumbersome to look across the tools to see how a particular user is doing, vs being able to view all of their data in one space.
• If you are a marketer, the editors for the Phishing Templates and Teachable Moments are quite frustrating. They feel out of date and clunky, as well as not featuring an auto-save, so you could lose the templates you are building. At this point, I have actually started to work in other email creation editors and learning HTML, to better customize and then moving all of the code into the editor. It has thus far proven to be less of a headache. I also do not believe the average user is working on branding their program, creating consistency for easy of navigation, and including additional resources in their teachable moments in the way we currently are. However, as more social science backgrounds continue to enter security awareness, I believe this will move towards the norm.
• Some of the reporting numbers for Simulated Phishing could be better. For example, telling me how many people acknowledged the teachable moment out of the full email campaign is less meaningful than knowing how many people acknowledged it, from those who actually triggered/were shown the teachable moment.

Incentivized

So far this platform has worked really well for our company. Feedback has been great from our users because training is interesting, interactive and always being updated. Phishing simulations have been extremely helpful for us to stay compliant with ISO requirements and provide insight into areas we need to improve upon to educate our users better and make them more aware of vulnerabilities and threats

Incentivized

• The product is great for what we use it for
• We have a good relationship with our vendor/Proofpoint, which I believe is needed to be successful in Security Awareness and using tools like this
• The package/service as a whole is incredibly helpful
• The integrations with Proofpoint's Trap is one of the most valuable things we could do. It turns your entire email user base into members of IT security, to be on the look out to report cyber attacks, and have them pulled out of everyone's email if the email is condemed/found malicious.

Incentivized

It works very good for our company because it is easy to maintain and easy to keep track of people who followed the trainings. We can add and remove people very easily and can keep track of the trainings. Because of this, we are able to chase users that did not follow their training yet and can make sure the company is aware of security risks.

Incentivized

Overall, PSAT is integral to what we do. PSAT is a helpful tool to help us improve our employees ability to recognize, report, and respond to phishing. It works for us to use a longterm partner, who is incredibly helpful/supportive, and also bringing Proofpoint's greater cybersecurity & attack intelligence into PSAT. Honestly, we are pretty happy and would make the choice to go with PSAT again (we evaluated the major players in the space via Gartner's Magic Quadrant). The team behind the products are excellent and the product of itself is both intuitive and expansive. This combination allows us to reach our 10k+ employees who are located in over 20 countries

Incentivized

the only time we needed support, the team was very responsive

Incentivized

InfoSec system has been up 100% since we started. never had a latency issue

Incentivized

We've gotten great help when we needed it. When our IT guy left who managed security, we had limited knowledge internally with all of the configuration and implementation. Support helped get us running quickly. They spent an hour or so with the new IT person and they hit the ground running. That was super easy.

Incentivized

Proofpoint support has always been above average. A lot of companies provide a customer service manager for your account but few have proved as connected as Proofpoint. The CSM was able to give us a good start with the product and checked in periodically. I found them always helpful with any questions and very knowledgeable about the platform.

Incentivized

preparing a presentation and a step by step was really easy

Incentivized

It is so very easy to set up and use and get going with, which makes the implementation process very quick and efficient.

Incentivized

Infosec [IQ] is lightyears ahead of cofense. They did not even have training videos on their platform. The cost for cofense also went up by nearly triple for education. Creating phishing emails was a chore and some things were not possible. Infosec [IQ] has much better templates and creating emails from scratch is a ton easier.

Incentivized

All three products have the pros and cons. Since we use other Proofpoint products, TAP, TRAP, etc. the integration with PSAT is much better. The other products do not integrate with TRAP nearly as well as PSAT.

Incentivized

Pricing per user is reasonable for an annual contract. Not a bad investment considering that phishing emails and other threats are popping up daily in our users email accounts. Imagine if they did not know how to identify threats and how to be more careful in clicking links, it would have a been a far more expensive endeavor to recover from a network attack.

Incentivized

the same system is setup for all users

Incentivized

They're well fitted for my business requirements. Reporting fraud actions and data piracy is important for my company's healthy life. More restricted access to hacking thus ensuring a safe workplace

Incentivized

• When we were threatened with a major price hike, we were able to transition to Infosec IQ at our current cost despite being a new account and the delta cost difference being high.
• Allowing our larger clients to access and administrate themselves cuts down on requests.
• The Outlook plug-in minimizes tickets asking our technicians 'is this spam?'

Incentivized

• I don't have any tangible numbers to provide, but we definitely have an increase in the number of staff reporting suspicious emails and fewer people clicking on phishing emails.
• The cost we are paying per employee (<$2 pp)is low enough that we can consider this a "benefit" we offer to our employees. The knowledge gained can also be applied to your personal life with similar threats.

Incentivized