KnowBe4 - A great way to get serious about security

We have chosen to integrate our KnowBe4 with our Active Directory structure to simplify the experience. We are also leveraging SSO so that users can easily access the content they need without needing to sign in to multiple systems. When you create groups that allow dynamic user lists you can really see the value of KnowBe4. We have dynamic lists that allow us to tailor content to the users that need more frequent training, and to give the high performers a more light touch experience.

Our organization uses KnowBe4 as our go to solution to the "end user problem." We use it to train our new hires, and continue that training for our veteran employees. We conduct monthly phishing campaigns to determine our effectiveness and keep users attention on phishing. The wonderful part of this is that we get measurable metrics to determine how effective the training is, and to see our good our users have become at spotting phishing.

Fresh training is the key to success for any security awareness program. If content becomes outdated, the end users will not be learning about the current threat landscape. In that regard, KnowBe4 is second to no other platform I have been a part of. Modules are updated regularly to ensure data is current. This, coupled with the weekly Scam of the Week, has allowed us to keep users informed of what is happening today rather than last year.

We are working to leverage the Phish Prone score as a KPI within the IT Department. This acts as a good indicator of our much risk we are mitigating just by keeping our employees aware of security threats. Going forward we hope to take advantage of the Virtual Risk Officer scores to get a better gauge of our overall organization's attack surface.