Home / Services / Security awareness & phishing
Awareness
Security awareness & phishing
Short monthly training, realistic phishing simulations and reporting that shows the auditor and the board the program works.
Training people have to sit through does not change behavior. The program is built around five-minute monthly modules, phishing simulations that look like the mail your people actually get, a one-click report button, and coaching for the people who click. Reporting shows click and report rates by department over time, which is exactly what SOC 2, HIPAA and PCI DSS auditors ask for.
from $2.50 per user per month
What is included
- Monthly five-minute training modules with a quiz, in English and Spanish
- Monthly phishing simulations tuned to your industry and vendors
- Report-a-phish button for Outlook and Gmail, routed to our SOC
- Automatic micro-training for users who click
- New-hire onboarding course and annual policy acknowledgement
- Quarterly report by department for leadership and auditors
What you receive
- Program calendar for the year
- Monthly results and a quarterly trend report
- Audit evidence: completion records, acknowledgements, simulation history
- Executive phishing briefing twice a year
How it runs
- 1
Baseline
An unannounced simulation in week one sets the starting click rate.
- 2
Run
Monthly module and simulation, with coaching for clickers inside the hour.
- 3
Report
Quarterly trend report by department; most clients halve their click rate in two quarters.
- 4
Renew
Annual policy acknowledgement and a refreshed calendar each January.
Questions about security awareness & phishing
Is this included in the managed plans?
Yes on Professional and Enterprise. Essential clients and companies without a managed plan can buy it on its own at $2.50 per user per month with a $250 monthly minimum.
Will our people feel tricked?
Simulations are announced as a program, never as individual tests, and no one is named in reporting below the department level. Coaching is private and takes two minutes.
Can the simulations use our real vendors?
Yes, with your approval. The most effective simulations imitate the payroll, shipping and SaaS notifications your people see every week.
Other services
Scope security awareness & phishing for your environment.
Thirty minutes with the people who will do the work, and a fixed price in writing the same day.