Automated campaigns with remedial training have proven very helpful. The Phish Alert button has also proven very helpful in improving user phish submission.
The training content isn't as customizable as I would like to see. Even with the Platinum subscription content seems somewhat limited.
Our organization is increasing its security posture with ever-evolving phishing and social engineering threats.
KnowBe4 has great training videos, a great platform for making your own phishing emails, and the best feature is probably the Phish ER system where you can use the system to analysis a reported message from your users for malware (using a scan from Virus Total) and then if it is malicious you can rip the messages from all users inboxes. This feature alone is worth the price of admission.
I wish there was an option to do more customized vhishing emails as well as smishing.
Our company was getting hit with a lot of phishing emails. Using Know Be 4's tools, I've been able to train users not to click on everything and ask questions about a suspicious email.
The content has been very helpful and informative for my users. Most claim to have learned quite a bit, and talk about what they discover from the modules. I also appreciate the variety of tools available to the administrator(s) that help make it easy to grab useful data in easy to present formats such as graphics, graphs, and charts to decision-makers and other parties of import. The additional ability to take all of that data, and cross-reference to historical data to show/track progress has enabled me to justify renewing our subscription with KnowBe4 as well.
The organization of the administrative console is a little tedious to manage and navigate, but even still is very workable.
When looking for user training, I strongly suggest focusing the pitch as it were on the practicality of the content for the cost of getting it. I know as a non-profit, my organization can hardly imagine not achieving a great ROI, but compared to the costs of dedicated security appliances or software suites, it is a much lower cost for a much greater benefit to ROI with KnowBe4. Even still, having compared a number of other products some years back before we opted to work with KnowBe4, their content and the people they have giving their expert input to develop it are second to none in my opinion.
The administrative console also provides a lot of useful information in practical formatting both for viewing and presentation to executives and other decision-making parties (things like graphical representations of the data like charts and graphs that can you can screen-shot, print, or snip and drop into slideshows or such, making it much easier to provide useful info in a laymen-accessible format to leadership. The ability to track changes in user behavior based upon their handling or treatment of simulated phishing emails and such has proven very useful to me, as well as all of the info and tools I mentioned helping to justify continued expenditure towards addressing the human-element of security that I know some security teams or officers can at times struggle to get other leadership to sign off on.
User awareness of the constant risks and threats posed especially by communication and social engineering was almost completely lacking outside of the C-suite at our organization, prior to our starting to work with KnowBe4. Both in general, and even among the leadership team, awareness has increased significantly, and user wariness of potentially malicious content and activities has very visibly increased over the past few years since we began to work with KnowBe4.
KnowBe4 dedicated success manager assigned to coach you through best practices. They help brainstorm ideas and really understand the tools.
Some of the courses don’t perfectly align with our process. We have to be careful to pre-screen content to be sure it fits us.
Our users were very naive regarding phishing emails. This training and ongoing testing process has significantly raised awareness and improved our testing scores. It’s working!!
The security awareness training content is very robust and rich. Our users are the weakest link when it comes to cybersecurity. Each year, we provide mandatory security training for all employees using KNOWBE4, and have received great positive feedback. The short duration trainings are tailored to develop the competencies of our users as it relates to social engineering, spear phishing, ransomware attacks and in general best practice for identifying security tactics deployed by hackers or intruders while they carry out their day to day tasks. The portal also offers tools that can be deployed to capture users that are prone to some of these security threats, which helps the IT department to better manage and secure our network and also provide more training for such users. Our users are now able to identify and report suspicious emails, text and calls when they receive it. We are better secured than we were before signing up with KNOWBE4 and also continue to pass audit compliance for cyber security awareness. We have seen ROI and will continue to use KNOWBE4 for our security training programs.
We do not have any downsides to using KNOWBE4 for the organization's security awareness training, but instead have benefited more.
The security vendor is about the best when it comes to security awareness training for any organization. We are very pleased with their product offering and support. The ROI will be seen within months.
The security awareness training content is very robust and rich. Our users are the weakest link when it comes to cybersecurity. Each year, we provide mandatory security training for all employees using KNOWBE4, and have received great positive feedback. The short duration trainings are tailored to develop the competencies of our users as it relates to social engineering, spear phishing, ransomware attacks and in general best practice for identifying security tactics deployed by hackers or intruders while they carry out their day to day tasks. The portal also offers tools that can be deployed to capture users that are prone to some of these security threats, which helps the IT department to better manage and secure our network and also provide more training for such users. Our users are now able to identify and report suspicious emails, text and calls when they receive it. We are better secured than we were before signing up with KNOWBE4 and also continue to pass audit compliance for cyber security awareness. We have seen ROI and will continue to use KNOWBE4 for our security training programs.
easy to use and a lot of automations and informative courses
their integration with managing users. its very challenging to add users and keep them updates.
Thre are a lot of firewall installed but when the users click on suspicious link the cyber defiance becomes weak
There is a lot of content in there and it is very useful for designing a number of security training programs
The password reset emails are clunky and confusing to end users, resulting in many calls to my help desk. Also, they are not sure whether to trust the training emails since they know the phish tests come from KnowBe4 as well
Be sure to put some time into learning the system and be prepared for a lot of questions from your end users and management
I think we have cut down on clicks on phishing emails which is what I wanted
The system has been easy to use and setup. We derive great value from keeping security awareness top and center for employees.
We don't really have any issues or concerns with the product.
We have derived great value from using this product; i have no problem recommending this product.
By automating the process of testing we are able to keep IT security awareness top and center for folks. We also have leveraged the very professional training packages to educate employees.
Once you understand the interface, it is pretty easy to use.
Once a training campaign opens, you can not make any changes.
We are using KB4 to accomplish our annual required training, do Phishing tests, provide supplemental /non-required training as well a providing some "fun" training using their "Inside Man" series of short fun videos that provide learning in the form of a Netflix type of medium.
The ease of use of the platform as a whole, from setup to ongoing administration it is simple and easy to use. The users love the training. The responsiveness of the account manager at initial setup was excellent, they were in contact to ensure we were getting full use of it and are still touching base a few times a year to update us on new content, additions/changes to the interface.
I've not found anything that I've actively disliked so far and I'm nearly 3 years using it.
Get a trial and you wont look back. My users actively ask me when the next training is coming out. Its engaging my users and whether they realise it or not they are absorbing the information.
We had issues with phishing and general security practices. Since implementation we've seen a drop in calls to the helpdesk for these issues, freeing us up to work on other areas.
