What’s Included
After the initial implementation described in the Onboarding section, Managed Solution will provide managed KnowBe4 security awareness training services to continuously strengthen Client’s security culture and reduce human-related cyber risk. Subject to Client’s selected subscription, managed KnowBe4 services may include oversight of security awareness operations such as phishing campaign management, monitoring and reporting, training administration, user support, and user management to ensure program effectiveness and continuous improvement.
Depending on the selected subscription, services will generally include:
-
Managed Solution shall administer ongoing phishing simulation campaigns through the KnowBe4 platform, including targeted simulations and user-specific reinforcement training triggered by simulation failures or identified high-risk behaviors. Campaigns will be designed to reflect current and emerging phishing techniques to ensure simulations remain representative of real-world threat scenarios.
-
Managed Solution shall monitor training completion rates, Phishing Prone Percentage (“PPC”) trends, and risky-user indicators within the KnowBe4 platform on an ongoing basis. Consultant will also track patterns in user-reported suspicious emails submitted through the KnowBe4 Phish Alert Button (“PAB”) or equivalent reporting mechanism, and escalate confirmed threats to Client’s designated contacts in accordance with applicable incident response procedures.
-
Managed Solution shall periodically refresh training content and adjust phishing campaign strategies based on simulation results, training completion data, and the evolving threat landscape. Consultant will leverage KnowBe4’s content library to assign role-appropriate training modules and ensure that the security awareness program remains effective, engaging, and aligned with Client’s security objectives.
-
Managed Solution will provide Client with quarterly and annual reports summarizing security awareness program performance, including PPC trends and reduction over time, training completion rates, simulation campaign results, and indicators of security culture maturity. Reports will include our recommendations for program adjustments or targeted interventions where persistent risk behaviors or elevated PPC rates are identified among specific users or departments.