Mimecast Awareness Training vs. SANS Security Awareness Training

For regular user level training this is very effective, but for more "high roller" type users this can be a bit of a generic approach that doesn't go down as well or is engaging.

Incentivized

SANS Security Awareness Training program would be well suited for a large organization that needs to develop multiple training programs with different courses based on the roles of the end users. It seemed a bit difficult at times to achieve simple setup processes because of the configurations tailored to larger, more complex organizations.

Incentivized

• Engaging content
• Professionally presented with a high level of polish and production
• Dynamic MI with pivoted actions to resolve pinch points
• Integration with AD infrastructure to minimize roll-out workload and expense

Incentivized

• Variety of cyber threat videos and presentations
• Web based and mobile access to the platform
• Easy to manage administrator access to configure the training sessions

Incentivized

• Custom Templates take time investment to get right
• Group templates and training are more US orientated that UK

Incentivized

• Mass import of users was a bit confusing
• User interface was sometimes not intuitive
• Ability to upload custom content was difficult to use

Incentivized

We looked at KnowBe4 on a number of occasions, but the lack of integration and costings made it a difficult sell at board level for us.

Incentivized

We actually are currently migrating to Proofpoint Security Awareness Training because of its integration with the Proofpoint email filter. This will allow us to target specific users who are clicking on bad emails with specific training material. We have used KnowBe4 in the past as well, but it was rather costly compared to SANS Security Awareness Training and Proofpoint. SANS Security Awareness Training seems to be the least easy-to-use interface from an administrative perspective compared to the other two.

Incentivized

• We have established a measurable increase in awareness for users to the business
• Quicker onboarding for new employees and getting up to speed in terms of awareness
• Real world reduction in users live bad links and bad email interaction

Incentivized

• Positive impact knowing we are educating our staff from phishing and potential cyber criminals
• Considering the potential for bad actors infiltrating our network, this is a small expense
• Pricing based on actual end users, worth the investment

Incentivized