Module-specific and job-specific test attacks

Interface is clunky for resending/recredentialing users; users report confusion on completion status of training modules

Cybersecurity should be top of mind, especially in healthcare. KnowBe4 checks a lot of boxes of keeping users up to date on vulnerabilities and best practices.

KnowBe4 has a lot of really great training materials on top of the phishing test campaigns that they handle. There is way more content available than we could ever use. But on top of the great content and the phishing campaigns, there service has been really great. Dedicated folks that have been with us the entire life of our account and we meet regularly to keep abreast of new features and look at ways to get better results with our staff.

Very little downside to using KnowBe4, really. For us specifically the only sticking points are that we use a different Learning Management System for most training so we're using two different systems. That being said, I can import SCORM files from KnowBe4 into our other LMS and that works great. We have another email gateway system that offers some of the same phishing campaign options, so you could argue we're double-paying, but I feel like the training materials and phishing campaign options have been more robust in KnowBe4 so the added expense has been worth it to this point.

KnowBe4 definitely makes my users more aware of the potential pitfalls associated with the day-to-day use of technology. Using KnowBe4 has made my users pay closer attention to their email and made them less likely to fall for phishing scams and social engineering attacks.

easy to set up training and track, ease of use

nothing, great implementation and support

tracking training and providing training

This product can fit into any security training needs, and is easy to setup and use. Support was fast to respond when I did need help during initial setup. We integrated it with Azure SSO and have followed their implimentation guide to get initial user assessments completed to establish a baseline and now have quarterly phishing tests scheduled with auto-enrollment in remedial training for users who fail the tests. There are a number of other resources available including print materials for handouts or wall posters and videos and other content can can be integrated into presentations or other materials. We probably use a quarter of the features available to us, and plan to utilize it more over time, but even with the level of testing and training we have now, we've already seen a massive improvement in our employees reporting emails and correctly identifying real and simulated phishing emails. Even with our small organization, we use it daily and have new users auto-enrolled in assessments, etc. to keep the dashboards accurately reflecting the knowledge level of our employees and can even see aggregate by department or the whole org.

It can be overwhelming at first, but once initial setup and integration with your user data is ready to go, it's entirely up to you to device how much or how little you do and can easily be scaled up or back as-needed. The content library is massive and can be confusing to decide what is the most relevant and/or included in your subscription, but there are filters you can play with to figure it out.

User security education in general, specifically on the safe handling of and identifying and reporting suspicious emails. The training provided exposes our employess to a broad knowlegde base of computer, email, and network security practices as well as common scams/spams/phishing and other attack vectors that we could not adequately spread the word about by ourselves.

it gives us the feedback we need to know like how many people are taking it how long they stay signed in. We also like the phishing campains that we are able to build ourselves.

there is not a whole lot not to like. Its a good product and it is well written with up to date senarios.

it is helps with our cyberseurity insurance by having this system in place.

Very easy and user friendly to orchestrate a phishing campaign to help keep staff aware of how to spot suspicious emails. I love the reporting that comes with the use of the software, it helps in finding your weak points as a company. Also love the added security campaigns that you can stack on the phishing campaigns to automatically send extra training to users who fail the phishing simulation!

Can be tricky to get this software to work in an environment with an existing DLP service as one may combat the other. I am still having a little bit of issues with this, but it is not the fault of the KnowBe4.

This product is really keeping our employees informed on how to spot phishing emails and how to understand basic cybersecurity. A companies risk fails heavily on the employee, so educating them on what to do and what not to do, is very beneficial and something that you cannot put a price tag on!

User friendly interface and easy training fpor different durations and phishing campaigns to meet regulatory requirements. Easy provisioning and deprovising of users. Rolling out training was super easy too. Easy Automation using the rules.

Customization more options to tailor the training content and phishing simulations to better fit specific organizational needs. Training content can be repetitive such a different duration of Kevin Mitnick trainings

New hire security trainings and compliance requirements

Upsides are new materials regularly. Instant notification to end-users when using PhishAlert.

Phishing campaigns are well designed.

paying more for a hight subscription level for additional training courses

Providing phish examples in everyday life to expose our internal users to what phishing can be.

I appreciate KnowBe4 for it's ease of security and healthcare training. It makes it incredibly convenient to know what our advantages and disadvantages are organization wide. There are so many features which benefit not just management but staff such as phishing campaigns, training that relates to burnout and mental health, unparrallelled support and help at all times. We use this program every day to monitor training, phishing, and just general knowledge. It is very easy for us to implement and integrate this product with our current user system.

The only downside I have been able to see is that we need an expansion of medical field related trainings.

It is filling in the gaps in our training and showing us areas we are able to learn and improve in.

Works with HIPAA and CMMC compliance, no need to look further into it.

Can time out when test emails with get sent out.

CMMC and HIPAA Compliance