KnowBe4 Security Awareness Training

My team and I use KnowBe4  primarily for security awareness training. The company assigns new training modules every few months, covering several topics such as phishing emails, safe web browsing, and other general security awareness training. More recently, we've received new modules related to the safe usage of AI tools and guidelines for preventing unintentional data breaches when interacting with AI systems; that is how we are using KnowBe4  in our company.

Besides security awareness, KnowBe4 gives me knowledge I didn't have before, such as the AI-related topics. Our work involves AI tools, and previously, my colleagues might have shared information that shouldn't be there in AI. With the training modules from KnowBe4, it raises our awareness about the information that could breach our company when using AI; I find that aspect positive about KnowBe4.

Most valuable for me are the interactiveness and format of KnowBe4. It has a realistic format; for example, when I'm taking the phishing simulations, the modules give me examples of the real phishing types that might be in my mailbox and how to deal with them. It's good for raising awareness of the threats, and I think it's easy to follow, even for non-technical staff. It is really effective for raising good habits regarding the threats.

The simulated phishing attacks feature has examples of several phishing attacks through email. It gives me four or more examples for each, such as asking for our details or having links leading to unverified websites. When I get emails similar to those, I know how to take action on the emails in my mailbox.

Regarding user behavior, I don't find KnowBe4's real-time insights and analytics very useful because I found it a bit repetitive. Also, if you've been using the platform for a while, their modules tend to be repetitive between the different modules.

I would prefer the aspect of product repetitiveness to be improved or optimized in the next releases of KnowBe4. The renewal of the modules needs to be updated simultaneously with new threats or new content as technology is evolving quickly. I think the UI needs improvement as it appears outdated for the current website for learning modules.

Negative

Before using KnowBe4, we had an academy website from our company, but later they started sending us KnowBe4 modules. Previously, training was just in PDF or videos, and then it changed to KnowBe4.

I started using KnowBe4 because the company assigned me to do it. I understand why the company switched from the previous technology to KnowBe4 because it forces us to really see, read, and understand the materials in the modules. The old system only provided materials in a read format, whereas KnowBe4 includes quizzes and an interactive way to understand the modules better.

I'm currently working with KnowBe4 Security Awareness Training . I've been receiving the links through my email from my company. KnowBe4 is accessed through the website.

The automated assignments have a good impact for me, and possibly my colleagues feel the same because the modules assigned to us are mostly related to our work. I'm not sure if they are assigned based on departments or roles, but the modules we receive are closely related to our work.

I don't have any information about the pricing and licensing of KnowBe4 as I'm just the end user. I haven't needed to use the documentation or manuals for KnowBe4 because I can operate the system efficiently without them.

On a scale of 1-10, I rate KnowBe4 an 8.

I worked as an intern where KnowBe4  was used as a third-party vendor in the company.

My responsibilities included assigning security awareness training to employees, running phishing simulation campaigns, monitoring user responses, and reporting on results.

When I started, my main tasks with KnowBe4  were sending simulations and selecting which ones to use. I would also be involved with choosing the training videos and quizzes to send out to users.

KnowBe4 significantly enhanced people's awareness of cybersecurity threats within the company through its simulations that replicated real-world scenarios. The phishing simulations were very realistic and helped test actual reactions. Through these platform simulations, people became more aware of cybersecurity threats and learned how to identify potential threats.

The platform proved effective as we could track responses to repeated simulations, allowing us to measure the effectiveness of previous awareness campaigns.

KnowBe4 improved awareness as employees became more cautious with emails. They developed better habits and would report suspicious emails using the company's reporting option. As months progressed, we observed more people reporting phishing simulations, indicating increased employee awareness within the company.

The most valuable aspect of KnowBe4 was its metrics capabilities. The platform allowed us to see departmental statistics, including click rates and user responses.

The real-time insights and analytics are very detailed, enabling accurate measurement of metrics and effectiveness of phishing simulations. The platform is user-friendly with an intuitive interface, making it an excellent overall solution.

An area for improvement in KnowBe4 is the repetitive content for users completing multiple training sessions. Additionally, some email simulations were blocked by spam filters, requiring IT to whitelist these email simulations.

I worked with KnowBe4 for seven months during my time as a cybersecurity intern last year.

KnowBe4 demonstrated good scalability, particularly in supporting compliance requirements. It was valuable for audit reporting, with metrics downloadable in PDF format. The platform effectively raised awareness and reduced phishing click rates.

My involvement with technical support was limited, so I cannot provide detailed information about KnowBe4's responsiveness or helpfulness.

Neutral

I did not use any previous solutions as KnowBe4 was user-friendly.

As an intern, I was not involved in the implementation team.

The solution proved valuable for audit reporting and successfully raised awareness while reducing phishing click rates.

I was not aware of alternate solutions as this would typically fall under an admin role's responsibilities.

From my experience, KnowBe4 was stable and proves to be a strong tool for organizations building a security awareness culture. It is simple to use and effective, even for companies starting out in phishing and training campaigns. I rate this solution an 8 out of 10.