KnowBe4 enables employees to make smarter security decisions by training them to understand the mechanisms of spam, phishing, spear phishing, malware, ransomware, and social engineering, and then applying this knowledge in their day-to-day job. Simply put, KnowBe4 helps you build a human firewall as your last line of defence. You need this because between 10-15% of phishing attacks do make it through your filters.

In a study of more than 9 million users across nearly 30000 organisations over a 12-month period, KnowBe4 found an initial baseline Phish­prone percentage of 27% across all industries.

After only 90 days of training and simulated phishing, the Phish-prone percentage dropped over half to 13%, and after 12 months, it was minimised to only 2.17% – an astounding 94% improvement in one year after using the KnowBe4 platform.

Forrester Research assessed the performance of the KnowBe4 platform in their Total Economic Impact (TEI™} Study and found a 127% return-on­investment with a one-month payback.

1. Phishing simulations at a rate of roughly one per week. These are safe phishing emails, which if a user does not take the appropriate cautious steps, and clicks on a link or opens an attachment, will then trigger a short piece of training about how to spot phishing emails.
2. A short piece of training roughly every three weeks: covering many aspects of cyber security. The training can be done by the user at any time in the three week period, and are usually only a few minutes long.
3. The option for policy rollout to users through the KnowBe4 system.
4. A weekly security tip emailed to each user.
5. A monthly KnowBe4 security newsletter.
6. Monthly reports on phishing and training.
7. The option for certain users to have report­level access to the KnowBe4 system.
8. Automated emails to managers showing whenever anyone is assigned training (including those who have fallen for a phishing simulation), and to point out if someone is failing to complete their allotted training.
9. The Phish Alert Button (PAB). This is a button that sits on the users’ Outlook clients, and empowers the user to react to suspected phishing emails. If the user identifies an email as a phishing email, they press the button: if it is a simulation then the user receives a message praising them for spotting the email and then removes the email; if it is not a simulation then the user receives a message thanking them for reporting it, and then sends the email onto whichever email address is set in the system for this purpose for further attention. The email is then removed from the user’s inbox.
10. The monthly email exposure report. https:// www.knowbe4.com/email-exposure-check/

1. Whitelisting and/ or DMI integration
2. Roll out the PAB
3. Provide the initial list of users to us or provide an appropriate contact within the client organisation to achieve this. Essentially, the things which we cannot do due to limitations of geography and system permissions