That it makes security compliance easy to track and conduct.

Removing expired training content from training campaigns.

It helps to keep staff trained on a annual basis.

The topics covered are relevant and seem to be constantly improving. Campaign delivery is straightforward, and record-keeping into our GRC Tool was easy to implement. It makes record-keeping simple, which makes it easier to stay prepared for FedRAMP audits. Phish campaigns are simple and effective.

I don’t like that when I clone a previous campaign, it automatically defaults to the current date, which can effectively cause the campaign to start too quickly.

This has improved our security culture by leaps and bounds. Since switching to KB4, our phish-prone percentage has dropped from 27.3% to 0.3% over the past three years.

The setup is very easy. The training library is extensive and includes a lot of security topics. Content is updated regularly which is beneficial in keeping our employees abreast of the latest threats.

Some features particularly audit logging for notifications sent can be improved. But overall, it is a minor discrepancy.

Building a security culture within the organization rather than just a tick in a box for compliance.

I like the reporting aspect. It allows me to know who took training and who didn't for compliance reporting.

The interface with the users. I wish it would query my SAML connection and create users as they are adding to MS365. This needs to be a better integration.

It helps with complaince and ease of pushing training to employees where they are. Instead of traditional classroom sessions

The available content and constant updates.

Not a console issue or a KnowBe4 issue but getting users engaged and getting other admins engaged.

Making users aware and providing a way to track users progress with assigned training modules.

The trainings are usually short and concise and can be understood by our cleaning staff all the way to our department heads. Once our users are in the system it's easy to roll out the trainings and monitor the progress. We can also supplement with our own training content and manage the campaigns easily through the use of smart groups.

Would like to see more updated trainings on the use of the phish alert button when Microsoft changes the location of the PAB in the desktop and web clients. Using the PAB is the #1 defense mechanism we have against attacks in our organization. Would like to see more short and professional training clips specifically on the PAB.

Training employees to think before opening emails and clicking links and providing a way for them to report emails they are not sure about.

The different types of videos and interactions.

Sometimes they go on too long but overall great.

It is explaining the why to users.

It covers all security topics, including newly current topics such as AI. Easy to digest yet interesting enough for technical folks to stay involved. I've administered the training (live 45 minute sessions) with hundreds of employees from high level executives to blue collar and they all have found value in the content. I like that KnowBe4 emphasizes the impact that a phishing attempt can happen to ANYONE regardless of rank, title or access.

It mentions to employees that they can submit anonymous tips about insider threats (as an example) which we don't have at my company.

It teaches folks to be unafraid of submitting phishing emails and brings awareness of the latest true phishing attempts circulating within my business

Effective and engaging for users. Templates are plentiful.

Notification templates are a bit plain and often look fake.

Identifying users who need additional training

Engaging and interactive content that uses real-world scenarios to enhance cybersecurity awareness.

Some modules can feel repetitive, and the frequency of training reminders can be overwhelming.

KnowBe4 helps reduce phishing risks, minimizes human error, ensures compliance, and fosters a strong security culture, enhancing overall cybersecurity.