What is managed security Awareness training?

Kevin Mitnick Security Awareness Training specializes in making sure your employees understand the mechanisms of spam, phishing, spear phishing, malware, ransomware and social engineering and can apply this knowledge in their day-to-day job. The best part is we manage it all for you. We setup the training and phishing campaigns and provide you with the detailed reports so your time is better spent elsewhere.

Baseline Testing

We provide baseline testing to assess the Phish-prone percentage of your users through a free simulated phishing attack.

Train Your Users

The world’s largest library of security awareness training content; including interactive modules, videos, games, posters and newsletters. Automated training campaigns with scheduled reminder emails.

PhishYour Users

Best-in-class, fully automated simulated phishing attacks, thousands of templates with unlimited usage, and community phishing templates.

See The Results

Enterprise-strength reporting, showing stats and graphs for both security awareness training and phishing, ready for management.

Request a Demo
Security Training

Security Awareness Training

KnowBe4 is the world’s largest integrated Security Awareness Training and Simulated Phishing platform with over 30,000+ customers. Based on Kevin’s 30+ year unique first-hand hacking experience, you now have a platform to better manage the urgent IT security problems of social engineering, spear phishing and ransomware attacks.

With world-class, user-friendly new-school Security Awareness Training, KnowBe4 gives you self-service enrollment, and both pre-and post-training phishing security tests that show you the percentage of end-users that are Phish-prone. KnowBe4’s highly effective, frequent, random Phishing Security Tests provide several remedial options in case an employee falls for a simulated phishing attack.

Request a Demo

4,000 Effective Phishing Templates?

More than ever, employees are the weak link in an organization’s network security.

They are frequently exposed to sophisticated phishing and ransomware attacks. Employees need to be trained and remain on their guard with security top of mind.

We offer the world’s most popular integrated platform for security awareness training combined with over 4,000 simulated phishing, vishing and usb attacks, created by KnowBe4. Find out how we manage the continuing problem of social engineering and create that human firewall.

You are welcome to call 07521 704764 for more information.

Request a Demo
Phishing Statistics
Security Training

Phishing

We schedule regular Phishing Security Tests (PST for short) from our large library of more than 4,000 “known-to-work” templates, choose from the community templates section, which were created by admins for admins to share with their peers. We can also create your own custom phishing templates. There are many more features!

In case an employee falls for one of these simulated phishing attacks, there are several options for correction, including instant remedial online training. We can schedule one-shot, weekly, bi-weekly or monthly simulated phishing attacks and immediately see which employees fall for these social engineering attacks. Here is some visible proof the training works over a 12-month period.

Our Phishing Reply Tracking allows you to track if a user replies to a simulated phishing email and can capture the information sent in the reply. You can also track links clicked by users as well as test and track if users are opening Office attachments and then enabling macros.

Request a Demo

Enterprise-grade Reporting

Enterprise-strength reporting. Both high-level and granular stats and graphs ready for management reports. We even have a personal timeline for each user.

Executive and enterprise-level reporting gives visibility into your entire organization’s security awareness performance with insights into correlated training and phishing simulation data over any specified period of time.

Request a Demo
Phishing Report

How real is the threat?

This is an actual incident that occurred recently in 2020 at a medium sized recruitment firm on the South Coast.

Emily (not her real name) works as an administrator. During the course of the day Emily responds to numerous emails from colleagues, candidates and customers. Emily opened the next unread email in her InBox and read that her Microsoft Office 365 Account was due to be suspended so she diligently opened the attachment as requested. She thought nothing more of it and carried on with her day.

A week later the recruitment agency received a call from one of its customers. The customer said they were responding to the change of bank payment details on the Xero invoice they had just received from the recruitment agency. What!! The alarm was raised immediately because the recruitment agency had not changed its bank account and was not advising its clients to pay invoices into a different account.

It transpires that Emily fell victim to an all too common and very sophisticated phishing attack. By opening what looked like a genuine Microsoft Office 365 email and attachment Emily inadvertently allowed hackers access to her computer. From there the hackers were able to obtain the login credentials to the agency’s Xero account, they logged into Xero and changed the agency’s bank account details to that of the hackers bank account. All invoices that were subsequently generated in Xero contained the hackers new bank details. Nice.

The agency was fortunate in that only a week had passed before they were alerted. But the length of time before the hack was discovered could have been much longer and the sums of money involved could have been a lot higher making the negative impact on the agency far greater.

So how can you prevent this from happening to your organisation? One of the best and almost immediate options to address this type of attack is to test and train your users regularly. This is easily achieved by sending out sophisticated but simulated phishing emails to your users. Emails just like the Microsoft Office 365 phishing email that caught Emily off guard or a Covid-19 update bulletin, or an email that looks like it is from the HR department. Only this time if a user clicks a link or opens an attachment they are immediately advised it was a simulated phishing email and are shown on their screen what they should have been looking out for. The system is also smart enough to register that a user clicked a link in a phishing email and will auto enrol them on additional online security awareness training.

Don’t forget all of this is managed for you.