Proofpoint Security Awareness Training Manufacturing Reviews & Insights

Score10 out of 10

66 Reviews and Ratings

Community insights

TrustRadius Insights for Proofpoint Security Awareness Training are summaries of user sentiment data from TrustRadius reviews and, when necessary, third party data sources.

Recommendations

The user reviews provide several valuable recommendations for using Proofpoint or similar software for training in cybersecurity. One recommendation is to take the time to set up good, functional phishing campaigns to effectively improve security posture. Another suggestion is to thoroughly compare other platforms to find better functionality at a similar price point. Lastly, it is recommended to request a trial of the product to assess its suitability for specific requirements and explore all available options before making a purchase decision.

Proofpoint Security Awareness Training Reviews

12 Reviews

ManufacturingChemicals1Food Production1Food & Beverages1Industrial Automation1Plastics1Packaging & Containers1Consumer Goods2Computer Hardware1Aviation & Aerospace1Medical Device1Biotechnology1

Employees are the first line of defense!

Rating: 10 out of 10

Incentivized

September 24, 2019

Use Cases and Deployment Scope

Currently, Proofpoint Security Awareness Training is being used company-wide with a few of the courses (phishing). With the IT staff, more of the modules are being assigned. We are also assigning the Intro to Phishing to all of our third-party distributors globally. So far, we have been getting favorable reviews from the training. I've also had a few other departments assess and give feedback on a few of the modules.

Pros

There is nothing new under the sun. Don't reinvent the wheel when it comes to security training. It is plug and play with Proofpoint Security Awareness Training!
The information in the training courses is up to date. I hope they continue to update the materials!
Languages. This is HUGE for us. Most of the modules are available in a wide variety of languages.

Cons

Updating courses (2-3 year rotation) to stay current with what is in the news and addressing those topics in security training.
The phishing courses are great (Phil and Phyllis) but the fish and cartoons could be changed to tell the same story in a new way. What about an immunization record?
More availability for customization before adding modules to our LMS. Giving us the ability to add our logo or company name would be great when choosing the SCORM file route.

Likelihood to Recommend

Phishing is a great course for us to be able to assign to our distribution partners. We have had a few phishing breaches and we recognize how important it is to educate our distributors in the field. Since we assigned the Intro to Phishing this year through Proofpoint Security Awareness, I would like to have the flexibility to assign the same course next year for new distributors as they onboard. With existing distributors, I don't feel 100% comfortable with assigned Phil and Phyllis. The cartoon fish is a bit cheesy.

Verified User

Manager in Customer Service (Medical Devices company, 10,001+ employees)

Vetted Review

3 years of experience

The Proof is in the Pudding

Rating: 10 out of 10

Incentivized

September 20, 2019

Use Cases and Deployment Scope

We use Proofpoint Security Awareness Training to empower our user-base with knowledge and techniques to combat information security breaches both at work and at home. Proofpoint is used by the entire organization, with the IT department coordinating phishing simulations, testing, and more on a set schedule. Teaching our users how to properly avoid hazardous links, unsafe sites, and social engineering helps to make our environment more safe and keep our employee's data safe at work, and at home.

Pros

Great communication from Proofpoint support
Unbeatable reporting tools
Great pre-baked tests and training which help keep the users focused and interested

Cons

There are so many reports and statistics that sometimes it can be difficult to find the exact metric you're looking for

Likelihood to Recommend

Proofpoint Security Awareness Training is well suited to any environment, but I think you will get the most value out of it in an environment where you have a medium to large sized user base and your users are not too familiar with the dangers of working online. Some content may seem old-hat to more tech-savvy. In our environment, it is the perfect solution.

Verified User

Analyst in Information Technology (Packaging and Containers company, 1001-5000 employees)

Vetted Review

2 years of experience

Build a "Culture of Security" for under $25K!

Rating: 10 out of 10

Incentivized

September 20, 2019

Use Cases and Deployment Scope

As often mentioned at Cyber Security Conferences User IT Security Awareness is a key component to your overall IT Security Program.

We’ve used a couple of different methods & companies in the past but the one we’ve found the most success with is Wombat Security Technologies (now Proofpoint).

They provide an Online Training Platform consisting of a number of IT Security Related Training Modules which we are able to distribute (or “assign”) to staff. The breadth and depth of modules goes beyond just avoiding Malware and gets into other security topics such as Data Protection and Destruction, Best Practices while Traveling, PCI-DSS and even PII/PHI & GDPR.

Rather than a single all-encompassing course, we found that small monthly modules that we dish out all year long was the most beneficial to staff to always keep “IT Security” on people’s minds (also, with this approach, as new people start with the company, they get the "security essentials" introduction but then they just fall into the monthly assignment rotation and eventually get all the modules). In addition, modules are updated as new threats emerge (like “ransomware”) so even when people get a repeat, it’s still relevant to their interests.

It was really important for modules to be short at sweet (no module takes longer than 10-15 minutes to complete) and the system will continue to remind (badger) them until they have completed the monthly assignment (note that to “complete” the course they not only have to go through the material, but they also have to achieve a “passing grade” in the interactive exercises).

The courses are “mobile responsive” and can be completed from any internet connected PC, tablet or smartphone, which allows people to do them from anywhere (this negates the complaints of that busy executive who is seldom in the office - "just do it from your phone while you are waiting in the holdroom for your next flight")

People love them and we consistently get 80%+ Participation in every monthly module among our 300 staff throughout all areas of the company (from the guys who sweep the runways to the plumbers in maintenance, to the admin staff in finance). This is because staff see the material as being not only helpful to the company, but also very relevant to protecting themselves at home.

Wombat provides you with an account rep so you can get advice on relevant topics, frequency of training, how to incent your staff, and pretty much anything cyber security related.

Our Proofpoint Package also includes access to their ThreatSIM tool so you can send out simulated phishing Emails and assess the effectiveness of your training programs (back in 2013 I did a baseline and we were 55% Susceptible to Email phishing. As of Q2 of 2019, we’re now down to 5.2% YTD, so I have tangible evidence that it’s been a huge success – besides the fact that we’ve been able to avoid widespread virus/ransomware attacks.)

Pros

Short Training Modules (10-15 minutes to complete)
Mobile Responsive (can be completed from any internet connected device)
Interactive (not just a video, to "complete" you need to pass the tests within the module - showing that you're paying attention and understood the material)
ThreatSim Testing (to validate the effectiveness of your program)
Reporting Tools (provide leadership & executive of performance within each department - don't underestimate the benefits of healthy competition within your organization)

Cons

Not ALL Modules are 100% "Mobile Responsive" yet (although they claim to be working on it)
Module Updates are not as frequent as hoped (although once a year seems to be about the norm)
The ThreatSim "Smishing" tool (simulated phishing of your users via SMS) is not available in Canada

Likelihood to Recommend

Perfect for regular (monthly) training of staff versus a "one and done" annual assignment on Cyber Security.
Allows for a greater number of topics to be covered and for creating a "culture" of security awareness among all Staff throughout the entire company. NOT a replacement for IT Security Certifications amongst your technical staff (CISSPs & GSLCs on staff are a must have). Your Proofpoint Account Rep does most of the heavy lifting, but the program still requires "care and feeding" (resources) within your organization - preparing monthly user lists for training assignments and preparing reports for leadership on participation & progress

Verified User

Director in Information Technology (Aviation & Aerospace company, 201-500 employees)

Vetted Review

3 years of experience

Proofpoint Security Awareness is a MUST HAVE for your Organization

Rating: 10 out of 10

Incentivized

September 20, 2019

Use Cases and Deployment Scope

Our company recently purchased Proofpoint Security Awareness to be used across our organization for security training. We realized that in order to keep our company safe it is important to educate our employees. We have been using the phishing campaigns, as well as the training modules.
We have been phishing different departments across the company to get an initial "click" rate. The week after the initial "phish" we then send the department through a training module. The third week they are "phished" again. This process has continued until the whole company has gone through this first phase. Going forward our plan is to add a Proofpoint Module to our New Hire orientation, and we plan to do Quarterly Campaigns across the organization on different security topics.

Pros

Proofpoint has a huge library of phishing emails to choose from. They add new examples every week.
The training modules are fun and interactive and keep the user engaged.
The posters, and downloadable materials are amazing and really give a great visual to support your security campaigns.
The product is easy to use, and Proofpoint Support Staff are always available to help with any issues you have.

Cons

After a training module is completed you will have people who have not done the assignment. I would like to see a way to auto enroll or add them to a new assignment, from the one the did not complete.
Mostly my issues are around the people who do not finish a training and how to make the process easier for the administrator since I am doing three of these a week it is hard to keep up with the people who do not finish or even start.

Likelihood to Recommend

I think that Proofpoint is the best product on the market for Security Awareness Training. They make it easy, they have taken all the guess work out of it. You are supplied with everything you need to have a successful program and you don't have to be a "teacher" to do this. They have taken all of the guess work out of it.

Nicole McMillian

Cyber Security Analyst in Information Technology at Associated Wholesale Grocers (Food & Beverages, 1001-5000 employees)

Vetted Review

1 year of experience

Get Wombat along with the rest of the Proofpoint security platform to ensure your company is well trained and protected

Rating: 10 out of 10

Incentivized

September 20, 2019

Use Cases and Deployment Scope

We currently use Wombat across the whole organization, it is deployed by my department (IT) to the rest of the company. We use Wombat to address phishing attempts via email to our end users as we continue to grow as a company. Pushing security awareness has become an important piece to ensure that our company stays successful and continues to push forward.

Pros

Phishing templates are very nice. I am looking forward to the new customization abilities that I saw at Protect 2019
Training modules are short but informative. Many end users would not be receptive of training modules if they were too lengthy or used too many technical terms for a non-IT end user
Account manager is very responsive to any questions or suggestions I may have.

Cons

Wombat could do a better job of providing a timeline of upcoming updates and features to the product, we don't seem to hear about them as much as we should I think.
I would like to see customization of training modules happen sooner than later.

Likelihood to Recommend

Wombat is a must have if you already have Proofpoint in your environment. Aside from that, I would rate it as a better standalone product than it's two main competitors (Knowbe4 and Cofense).

Wombat could be less appropriate if your user base is solely an IT user base, aside from that I would think Wombat or any sort of security awareness software is a necessity in your business environment.

Verified User

Administrator in Information Technology (Computer Hardware company, 201-500 employees)

Vetted Review

1 year of experience

Great tool to test employee security awareness

Rating: 10 out of 10

Incentivized

September 16, 2019

Use Cases and Deployment Scope

It is more comprehensive than what I was expecting. The threat sims are a great at probing users awareness.

Pros

Threat simulation
Assessment exams
Examples

Cons

Ability to select any training after an assessment
Design an entire program including threat sim, training, and assessment
Notifications

Likelihood to Recommend

Threat simulation is the most valuable part of the package. Multiple examples are given in each training module.

Gus Ko, MBA, MCSA, MCDBA, CCA

IT Manager in Information Technology at Steven Engineering, Inc. (Industrial Automation, 51-200 employees)

Vetted Review

1 year of experience

Proofpoint Security Awareness Training

Rating: 9 out of 10

Incentivized

September 16, 2019

Use Cases and Deployment Scope

Proofpoint Security Awareness Training (formerly Wombat Security) is being used throughout the organization to increase information security awareness. It is being used throughout the whole organization. We run 4 awareness campaigns a year that are mandatory for users to complete. It helps us not have to develop security awareness content ourselves, not have to invest in an eLearning platform and not have to develop reporting a KPIs.

Pros

Short and sharp awareness modules.
Possibility to FULLY customize the training modules (new feature in the latest release).
Very well received by users.

Cons

Reporting can be a challenge.
Including the 'people manager' in reminder emails is missing.
Many user enrollment options exist. An API would be welcome to automate user enrollment for organizations where directory sync doesn't work. Currently, these are limited to 'bulk uploads.'

Likelihood to Recommend

Proofpoint Security Awareness Training (formerly Wombat Security) is well suited to significantly increase the security awareness in an organization. Short and to the point training sessions clearly help to increase the security awareness of the participants.

Verified User

Director in Information Technology (Plastics company, 10,001+ employees)

Vetted Review

2 years of experience

Proofpoint Customer? Then your security awareness cannot do better than PSAT.

Rating: 8 out of 10

Incentivized

September 13, 2019

Use Cases and Deployment Scope

Proofpoint Security Awareness Training is helping us educate our end users on cyber safe behaviors. We have over 10,000 employees across 30+ countries. We have seen an improvement in cyber risky behavior since rolling a number of the tools, from phishing simulations, e-learnings, phish alarm (phish analyzer integrated with trap). It is just one part of our overall Cybersecurity Education & Awareness program, but an important one that allows us to reach all of our employees.

Pros

One of the most important things it does well is providing support from day one. The team is very friendly, knowledge and quick to help where need be. One of the reason's why we choice Proofpoint over other leaders in the Gartner Magic Quadrant for Security Awareness Computer-Based Training was because of its team.
Being a Proofpoint customer, Proofpoint Security Awareness Training's Phishi Alarm & Analyzer integration with Proofpoint tool's such as TRAP allowed us to use automation to help protect the company. The ability to turn all employees into part of the IT Security team, by reporting phish with a button in outlook and then to pull back out of all employees email if condemned, is very powerful. We are looking forward to what is to come as this relationship deepens.
It has a comprehensive set of resources and tools to help support a Security Awareness Program. It is nice to be able to work with one company who does many things well vs multiple partners for different aspects of Security Awareness Training.

Cons

The lack of a user rating on "cyber risk" is proving to be an immense difficulty. As we are looking at how to better hold our employees accountable as well as provide increased learning opportunities for those who need it most, it is becoming cumbersome--especially given the fact this is starting to become the standard for Security Awareness companies. The lack of this is resulting in a manual process vs being able to automate and moderate, thus taking up time and resources, which are always at a scarcity. It can also be cumbersome to look across the tools to see how a particular user is doing, vs being able to view all of their data in one space.
If you are a marketer, the editors for the Phishing Templates and Teachable Moments are quite frustrating. They feel out of date and clunky, as well as not featuring an auto-save, so you could lose the templates you are building. At this point, I have actually started to work in other email creation editors and learning HTML, to better customize and then moving all of the code into the editor. It has thus far proven to be less of a headache. I also do not believe the average user is working on branding their program, creating consistency for easy of navigation, and including additional resources in their teachable moments in the way we currently are. However, as more social science backgrounds continue to enter security awareness, I believe this will move towards the norm.
Some of the reporting numbers for Simulated Phishing could be better. For example, telling me how many people acknowledged the teachable moment out of the full email campaign is less meaningful than knowing how many people acknowledged it, from those who actually triggered/were shown the teachable moment.

Likelihood to Recommend

Proofpoint Security Awareness Training is great for

Simulated Phishing Campaigns
Automated/Triggered Training when there is a failed campaign
Phish Alarm & Trap Integration is crucial for your employee base helping report phish; TRAP helps to keep us all safer by pulling back reported phish from all employees inboxes.

It less suited for

Identifying those employees most at risk in your company; it does not pull together how an individual is doing across the different offerings
Getting training to your most cyber risky employees (because of the above)
Tracking & getting training to those employees who actually cause security incidents. While we are currently using Proofpoint Security Awareness training, it is a very manual process to assign this and follow up with employee
Annual Training: I am hopeful with the refresh of training content this will improve; the content previously was good for follow up training, but not a more engaging/comprehensive annual training

Verified User

Employee in Information Technology (Biotechnology company, 10,001+ employees)

Vetted Review

1 year of experience

Empowering our first line of defense!

Rating: 8 out of 10

Incentivized

September 11, 2019

Use Cases and Deployment Scope

Proofpoint Security Awareness Training is being used across the whole organization. It is instrumental in getting employees to think about security upfront, rather than after an incident has occurred. Employees are exposed to new training material on a regular basis, and also have the opportunity to test their awareness via threat simulation emails.

Pros

Training is quick and easy to digest.
Training is presented in a mobile-friendly manner.
Information provided within the training provides value to employees' personal and work life.

Cons

Reporting is cumbersome at best. It is not easy to paint a good picture of the value gained by having employees complete awareness training.

Likelihood to Recommend

Proofpoint Security Awareness Training does a great job preparing employees to spot emailing phishing attempts. Driving home the concept of not clicking on a link that you were not expecting is very effective in combating the large majority of email threats. Proofpoint can do a better job of updating their content. I have not seen significant changes over the last year or so.

Verified User

Manager in Information Technology (Consumer Goods company, 5001-10,000 employees)

Vetted Review

3 years of experience

Improvement With Proofpoint

Rating: 9 out of 10

Incentivized

September 11, 2019

Use Cases and Deployment Scope

It is being used across the company. I send out the training to our users on a quarterly basis. I also send out threat simulations to users about 3 times per year. We use this training to inform and teach our users to be cautious of suspicious emails, websites, attachments, etc.

Pros

Teaches users how to look over email before they click on any link or attachment. Shows them how to recognize suspicious emails by noticing misspellings, bad grammar and sentence structure.
Our users are quick to send us what they receive to get verification as to its legitimacy before clicking links or opening attachments.
Most know how to hover over the link to see where it really takes them.

Cons

Some of the training material templates contain language that is not suitable for our culture such as "you could lose your job". We would not punish our folks that way if they accidentally clicked a link that could compromise our system. We have had ransomware in the past that was done without intent and we would not fire anyone for this. This is just our culture.

Likelihood to Recommend

Most of the training modules are well-suited. The threat simulation is a little tougher for our folks to handle when they fall for the phish. I don't send them out as often as the training modules.

Verified User

Employee in Information Technology (Food Production company, 201-500 employees)

Vetted Review

6 years of experience

Loading Reviews List....

Build a "Culture of Security" for under $25K!

Rating: 10 out of 10

Incentivized

September 20, 2019

Use Cases and Deployment Scope

As often mentioned at Cyber Security Conferences User IT Security Awareness is a key component to your overall IT Security Program.

We’ve used a couple of different methods & companies in the past but the one we’ve found the most success with is Wombat Security Technologies (now Proofpoint).

Wombat provides you with an account rep so you can get advice on relevant topics, frequency of training, how to incent your staff, and pretty much anything cyber security related.

Pros

Short Training Modules (10-15 minutes to complete)
Mobile Responsive (can be completed from any internet connected device)
Interactive (not just a video, to "complete" you need to pass the tests within the module - showing that you're paying attention and understood the material)
ThreatSim Testing (to validate the effectiveness of your program)
Reporting Tools (provide leadership & executive of performance within each department - don't underestimate the benefits of healthy competition within your organization)

Cons

Not ALL Modules are 100% "Mobile Responsive" yet (although they claim to be working on it)
Module Updates are not as frequent as hoped (although once a year seems to be about the norm)
The ThreatSim "Smishing" tool (simulated phishing of your users via SMS) is not available in Canada

Likelihood to Recommend

Verified User

Director in Information Technology (Aviation & Aerospace company, 201-500 employees)

Vetted Review

3 years of experience