Item: Infosec IQ
Rating: 9
Author: Verified User

Use Cases and Deployment Scope

Our users will receive a phishing sim when they're least expecting it and with varying levels of obvious. They will get follow-up training if they click or congratulations if they mark it as phishing (using the PhishNotify button). Between phishing tests, users are able to manually mark phishing attempts (again, using the PhishNotify button) and it records the email and sends IT information on it. We can then review the email and train our users. It's a simple to use tool with great potential. Our users really have learned important lessons about Email security using this tool.

Pros and Cons

Educates the end users
Simple reporting tools
Great feedback to the IT team on who needs more help
Encourages slowing down and reading for phishing attempts
Reduces random clicking

When a user reports an email, it doesn't give IT a way to respond/release it when it's legit email.
It could be a little more intuitive on the administrative side (still really easy comparatively)

Most Important Features

Easy to use
Teaches users a lesson
Great reporting

Return on Investment

Considering the previous example, the ROI has been huge. Even preventing one accidental click on a real phishing attempt was a massive gain!
Users are learning and applying what they've learned to their personal accounts as well as professional!
Being able to fine tune our phish sims has made this tool super helpful!

Alternatives Considered

I haven't been part of a team during the evaluation period of a product like Infosec IQ. The previous company I worked for had a different group make this decision and this company already had it in place before I joined. Though I would have loved to see what else was available, I don't have anything helpful to share here...

Key Insights

Do you think Infosec IQ delivers good value for the price?

Yes

Are you happy with Infosec IQ's feature set?

Yes

Did Infosec IQ live up to sales and marketing promises?

I wasn't involved with the selection/purchase process

Did implementation of Infosec IQ go as expected?

I wasn't involved with the implementation phase

Would you buy Infosec IQ again?

Yes

Other Software Used

Freshdesk, ClickUp, Netbox

Likelihood to Recommend

We had a third party email sender get compromised. About a dozen users who deal with this individual all got the exact same phishing email within 10 seconds of each other. Every single user knew from our test sims that this was suspicious (no CC's, no BCC's, etc.) and they all reported the email as phishing. This really makes a difference in our real world use, before our phishing sims at least one of those dozen would have likely clicked!

Phishing sim done right!

Overall Satisfaction with Infosec IQ