KnowBe4? More like KnowEvenMore!

We use active directory to import users from a specific security group. From there, we use the KnowBe4 console to break users down into departments.

We are using KnowBe4 for phishing training and testing among any users that have public-facing email, which is roughly 1/2 of the company. This helps users recognize and act against malicious emails, links, etc. Not only does this help protect the company against CEO fraud, malicious payloads, and credential theft, it gives end users a skill that they can use in their everyday life.

It gives us a variety of training that applies to specific departments instead of having a generic training for the entire company. KnowBe4 also make sure to keep their content relevant to what is going on in the world today - whether it be current events, advancements in technology, or current exploits in the wild.

Trends that show improvement (or lack thereof) of users when faced with phishing tests are the main metrics we watch, but it is also helpful to know how we stack up against other organizations in our industry.