Item: KnowBe4 PhishER/PhishER Plus
Rating: 10
Author: Brad Bookser

Use Cases and Deployment Scope

The school has implemented the PhishER add-on for easily reporting suspicious emails. PhishER’s tools analyze these reports, reducing the workload on IT staff. PhishER streamlines the process of identifying, reporting, and responding to phishing attempts, thus saving valuable IT resources. PhishER is integrated into the school’s Gmail and IT security systems to prevent attacks through end user awareness and reporting.

Pros and Cons

The platform offers a simple, one-click reporting button for end-users.
Allows teachers to report suspicious emails without needing technical expertise.
The IT department is able to review all suspicious email in one dashboard.

Enhancing the automated response capabilities, such as directly initiating remediation processes or integrating with other cybersecurity tools, could further streamline the threat management process.
Implementing a feedback system where users can be informed about the outcome of their reported emails might encourage more proactive engagement.
the reporting tool is not as streamlined on mobile devices as it is on desktops. Enhancing mobile functionality would be beneficial

Return on Investment

Implementation of PhishER has led to a notable decrease in the time required to respond to phishing incidents. Before PhishER, our average response time was around 48 hours; post-implementation, it’s been reduced to under 24 hours. This improvement directly translates to a more resilient and secure operational environment.
By automating the initial analysis of potential threats, PhishER has significantly reduced the workload on our IT security team.

Time Savings

Using KnowBe4 PhishER, our organization has streamlined the incident response process, distinguishing real threats from harmless emails efficiently. This precision has saved us substantial time, estimated at a 55% reduction in sifting through false positives. The time saved is reinvested into proactive cybersecurity measures and staff training, enhancing our overall security posture and reducing the risk of data breaches, thereby delivering significant value in terms of both resource allocation and risk mitigation.

PhishER Capabilities

As of now, our organization hasn’t implemented any of these specific capabilities like PhishML, PhishRIP, PhishFlip, or the PhishER Blocklist from KnowBe4’s PhishER. However, recognizing their potential to automate threat remediation, transform threats into training, and customize security measures, we plan to explore and likely integrate these features in the new year to enhance our cybersecurity infrastructure and response efficiency.

Alternatives Considered

Fortinet FortiGate

Compared to Fortinet FortiGate, KnowBe4 PhishER stands out primarily for its user-focused phishing simulation and training capabilities. While FortiGate excels in network security and firewall protection, PhishER’s strength lies in its specialized focus on email threats and user education. We selected PhishER for its comprehensive approach to phishing awareness, which is key in our strategy to empower employees as the first line of defense against email-based cyber threats.

Key Insights

Do you think KnowBe4 PhishER/PhishER Plus delivers good value for the price?

Yes

Are you happy with KnowBe4 PhishER/PhishER Plus's feature set?

Yes

Did KnowBe4 PhishER/PhishER Plus live up to sales and marketing promises?

Yes

Did implementation of KnowBe4 PhishER/PhishER Plus go as expected?

Would you buy KnowBe4 PhishER/PhishER Plus again?

Yes

Other Software Used

Lightspeed Filter, Jamf Connect, Jamf School

Likelihood to Recommend

With a mix of staff, teachers, and potentially older students handling sensitive information, PhishER’s reporting tools are ideal for creating a safer email environment. The platform’s ease of access and user-friendly reporting mechanism is particularly beneficial for dispersed workforces.

Product Configurability

I find KnowBe4's PhishER product to be balanced in terms of configurability. It strikes a balance between flexibility and ease of use. The ability to tailor the system to our specific educational environment without getting overwhelmed by complexity is particularly beneficial. This optimal level of customization allows us to manage phishing threats effectively.

Configuration Lessons

Ensure that configuring KnowBe4's PhishER plugin to Gmail is simple and effective. Start by ensuring all members of staff can access the plugin to help facilitate the reporting of any suspicious emails. Ensure one also often updates the filters for keywords used for educational phishing to be based on recent trends. Instigate a culture of vigilance and speedy reportage. Finally, integrate PhishER with your existing IT architecture for streamlined incident response and tracking.

PhishER: Your Cybersecurity Shield Against Email Threats!

Overall Satisfaction with KnowBe4 PhishER