This phase builds a measurable security culture by segmenting employees into risk cohorts, assigning training journeys, launching phishing simulations, tracking completion, and converting weak behaviors into targeted remediation tasks. It gives security, HR, and compliance teams a single view of people-related exposure.
- Role-based training journeys for executives, finance, IT administrators, remote workers, and high-risk departments.
- Simulated phishing campaigns with click-rate, report-rate, credential-entry, and repeat-risk measurements.
- Employee cyber hygiene policies, acknowledgement tracking, and targeted micro-learning after risky actions.