By role · Security Awareness Manager
Sent, opened, clicked, reported. All four, per person.
Training that only reaches people with a login is not a programme. Modules are yours to author, enrolment goes by department and phishing runs on a recurring schedule, read per recipient rather than as one company rate.
What this replaces
- An annual slide deck watched at double speed and signed off by everyone.
- One phishing test, then a month of arguing about the result.
- A single click rate for the company, useless for deciding who needs help.
What you do here
- 1Author the training module yourself.Lesson builder, interactive content editor and quiz tab sit in one editor. The course is yours to change mid-campaign.Module editor
- 2Enrol a campaign by user or department.Launch it, then resend to the people who never finished it. Completion and average score show per participant.Campaign detail
- 3Reach the staff who have no account.The training portal opens from a link in the email, so contractors and factory staff are in the numbers too.Training portal
- 4Design a phishing simulation in five steps.Campaign details, email template, landing page, recipients, schedule, then launch — or send yourself a test email first.Phishing wizard
- 5Set the programme to repeat itself.A recurring programme keeps run-now and a run history; rounds land without you hand-launching each one.Recurring programmes
- 6Exclude the people who should not be targeted.Target groups resolve to named recipients; an exclusion list keeps the same handful from being hit twice in a quarter.Target groups
What changes
- Sent, opened, clicked, submitted, reported, compromised: six states, tracked per person.
- A report rate, a leaderboard and a per-user risk score turn one number into a name.
- Programme analytics sit in the Awareness reporting tab, an add-on the tenant must be licensed for.
Training campaignsModule editorTraining portalPhishing simulationsRecurring programmesExclusion listsPhishing leaderboard
Where the role stops
Campaigns, modules and phishing are yours; the team roster is read-only. You record training against a person; creating, disabling or reassigning that person happens elsewhere.
Works with
- Security ManagerOwn the operational day: the vulnerability queue, incidents from triage to lessons learned, access certifications, hardening sign-offs and phishing rounds. Each carries an owner, a date and a record behind it.OPS
- CISOFour teams, four numbers, one board meeting. Here the board pack, the maturity grade, the budget line and the permission matrix all read off the data your team already works in.STRATEGY
- Compliance OfficerMap one control to several frameworks, take the audit cycle from scope to certificate upload, then close each finding against a verify step instead of an opinion.COMPLIANCE
Ready to move
beyond legacy GRC?
14-day free trial. No credit card. Cloud or on-premises.