Comprehensive training platform. Automation galore.

Currently KnowBe4 is synced with AD for user management via their Active Directory Sync Tool. Specific fields can be defined such that unwanted information is not passed to the KnowBe4 platform. Once inside the KnowBe4 platform, Smart Groups can be defined for automated tasks.

KnowBe4 is currently used as an employee assessment tool, training tool, and simulated phishing tool in our organization. We were previously using a competing product which offered a simplistic interface but had severe limitations when it comes to automation and customization. KnowBe4 comes with a much more advanced interface and provides features like automatic enrollment for onboarded users, smart groups to group users based on defined criteria, and fully customizable phishing and training campaigns and a multitude of templates to choose from. Furthermore with PhishAlert and PhishER, users can report and submit phishing emails which are automatically analyzed using machine learning to determine if the email is clean, a threat, or spam. Actions can also be defined for each scenario. I've probably repeated the word automatic a number of times and that's probably the thing I most appreciate about this platform.

My experience with KnowBe4 is quite new so I can't attest to how frequently the training content is refreshed. However, I've looked through their ModStore catalog and I seen and used very recent topics including ones related to COVID-19. So my impression is that they do update content frequently.

In my opinion, the most important metrics are employee progression and organizational risk level. Those who continue to fail or do poorly in simulated phishing campaigns and training would require more intensive training until they understand concepts. Over a period of time of using the platform, we also expect risk to go down as employees are more proactive in identifying/reporting threats and also gain up-to-date knowledge of all security related risks.