Phish says... Librarians like donuts.

We have been using KnowBe4 for our security and phishing training the past few years. I email the newsletters to all staff and board members. Posters are put up in various parts of the building as reminder or reinforcement of what was learned. This product is used company wide. It has made staff more knowledgeable and aware of current threats. This knowledge has helped the staff to educate the patrons who use library services. I can see us utilizing more training in the future, especially the state specific modules (e.g. harassment), since Illinois updated training requirements Jan 1, 2020.
We will be renewing our subscription when the current one expires.

I appreciate that the content is being kept up to date with the ongoing threats that seem to be occurring on an almost weekly basis. It's not the same old training time after time. It's kept relevant, informative and sometimes humorous. I like that aspect. My staff seems to appreciate it as well, from some of the comments I have received.

The platform is easy to use. New users are automatically added to the 45 minute Kevin Mitnick training. This has been made mandatory by the director as part of their smart goals. Other training is either for everyone or job specific (e.g. managers). Phish training is done quarterly, other targeted as needed. Newsletters are monthly. Scam of the week goes out to all at the beginning of each week.

The phish alert reporting is the most important to us. The phish prone and risk score are informative. We as an organization, can see where we stand among others in our industry and internally. We can see if there are fluctuations and plan necessary training accordingly. During one such training, it was discovered that librarians like donuts (50% failure rate on a phish test).
I can also see if training has or has not been completed.