KnowBe4 is the solution to the human firewall dilemma.

KnowBe4 is currently being used to handle our PCI-based security awareness training, as well as overall awareness of the most recent threat landscape. We also use their Phishing simulation campaigns, as well as a few other solutions, like Phish Alert and Second Chance. We use all KnowBe4 solutions across the enterprise, and it has provided visibility into the employees that could be susceptible to phishing attacks, social engineering, and other techniques used to compromise a business.

It keeps the program from being easy to game, by employees seeing the same content over and over. Knowledge and memorization are two completely different things, so it's best to ensure employees are building a knowledgebase, versus remembering the "right" answer to get through the training, but then end up getting compromised later by a real attack.

We take a community approach by having multiple people involved in managing and monitoring who has not completed their training, who is struggling with the content, and who is failing Phishing simulations. We hope to eventually have one person manage it all down the road.

Percentage of people failing Phishing simulations and quiz questions within the various training. That allows us to focus on those specific users and provide more training as needed.