With well over 500 customers and adding 30 accounts every month, KnowBe4 is the market leader in security education and behavior management programs for Small and Medium Enterprise in the US.
Traditional once-a-year security awareness training (check-box compliance) falls in the category of "If you fail to plan, you plan to fail". Today, employees are exposed on a regular basis to sophisticated phishing attacks and need to be on their toes year-round with security top of mind.
You cannot rely on the individual employee's decisions to either click or not click on a potential malicious link. Today, you need to have an employee security education and behavior management program in place which first establishes a baseline phish-prone percentage, then a thorough training program that covers the main attack vectors, and then a constant repetition that effectively influences the behavior of the employee at their place of work, which is right in their inbox they work out of every day.
The security awareness program administrator needs to think like a PR/Marketing manager. They need to promote the program, "sell" it to the whole organization, and make it as easy as possible to deploy the program with the minimum amount of disruption and loss of time.
The easiest way to do this is to send all employees regular simulated phishing attacks using various topics like banking, current events, IT, healthcare, social networking and more. If an employee clicks on a link, they get instant feedback they clicked on a phishing link. These clicks get tracked and reported to the program administrator. Here are some links to the most relevant resources on our site related to this:
So, what to do next? We recommend you start with our free Email Exposure Check which shows you your email attack surface. Sorry, sometimes this is an unpleasant surprise, but great ammo to get budget approval.
