Item: KnowBe4 Security Awareness Training
Rating: 10
Author: Verified User

Overall Satisfaction with KnowBe4 Security Awareness Training

Use Cases and Deployment Scope

We have deployed our training modules company-wide, to anyone who has a company e-mail address. It addresses the problem of the IT department not naturally being visible or involved with remote users who we don't see on a daily basis. The KnowBe4 platform and the training creates that regular presence and has reduced the incidences of (real) phishing failures.

Pros and Cons

Pros

The training modules are easy to assign and easy to understand on the user's end
An abundance of choices for content and choices for customizing it for different groups

Cons

It does not seem possible to create test campaigns or campaign templates that you may want to start at a later time, you must create an active one, so it seems more possible to accidentally assign training than I'd like.
When you send weekly or monthly security tips, this is considered a "phishing" campaign and the users can report the e-mails. Seems like it could be confusing and should be a separate feature.

Return on Investment

Hugely easier ability to remove identified threats directly from user's inboxes before they receive them (using PhishRIP). Had no tool to accomplish this previously and spent much time contacting users and departments to warn them about identified threats.
Hugely more visibility of users that pose higher risk within the company who have been identified as needing more training, preventing data breaches, loss of company data and reputation.

KnowBe4 User Management

Users are synced automatically from our Microsoft directory. We do not have our users organized in KnowBe4 by department, country, language etc. These are all features but we have not taken the time to make our training more granular with these options or by targeting specific groups, it's easier to assign the campaigns to the whole company.

KnowBe4 Reporting

It's great to see the entire list of phish-prone users and the percent of failure company-wide over time

Likelihood to Recommend

I believe KnowBe4 training is well suited for almost any company that uses e-mail for communication. We receive phishing e-mails from customers in our industry regularly so it is obvious that people are falling for real phishing attacks and have lax security policies.

I can't think of a scenario where the program would not be appropriate, however the program could cause a lot of confusion within the company if not thoroughly setup, planned and communicated with all parties.

Comments

Please log in to join the conversation

Eays to use, all-encompassing security awareness and training system.