Security Awareness Konzept

Fully secured

The Security Awareness Suite provides comprehensive security awareness training for your employees. Various automations in the form of the awareness engine and the spear phishing engine are used to control the training. In this way, employees are trained as needed to reliably recognize and effectively ward off cyber attacks - without administrators or CISOs having to familiarize themselves with the underlying psychology and didactics. The basis of the awareness training is a patented procedure for measuring the security behavior of all groups and users participating in the security awareness training. Based on the measured security behavior, the scientific key performance indicator Employee Security Index (ESI®) and the training KPI are calculated. The levels of spear phishing emails are based on standardized classifications: the higher the level, the higher the attacker's time investment. Like real attackers, they use potentially malicious links, fake login pages, macros, and encrypted file attachments. Spear phishing e-mails are sent at different levels of difficulty, in which, among other things, high-quality spear phishing is implemented with the simulation of fake internal e-mail traffic:

• Level 1: Mass Phishing
• Level 2: Targeted Phishing, also known as CEO Frauds
• Level 3: Spear Phishing using publicly available information about the company, for example from employer review portals
• Level 4: Spear Phishing related to the recipient's individual job position and department, emails from direct colleagues or superiors

More information can be found in the data sheet.

Combination of phishing training and interactive learning module

This module combines the two monthly services offered by Network Box. Customers receive 2 phishing campaigns and corresponding reports that show the overall results, weaknesses, and strengths of the participants, so they have a clear overview of next steps after completion. Participants are also trained through eLearning, take exams and receive participant certificates upon success. The eLearning module trains your employees interactively in the areas of Clear Desk, password management, safe surfing, phishing and 2-factor authentication. You also get free access to the "NB Detector" browser plugin, which warns of fake websites.

Fast and easy setup for maximum success

With this phishing attack simulator, your employees become the human firewall of your company. Sophos Phish Threat simulates various phishing attacks to quickly identify and address weaknesses within your organization. Through practical training, participants are educated about the dangers of phishing and trained in prevention. Training content includes:

• 60 effective training modules
• Comprehensive reporting

The anti-phishing training is integrated into the cloud-based security console Sophos Central. If you have access to the console, you can activate the Phish Threat training without installing hardware or software. Sophos Anti-Phish Threat Training is the only solution on the market that offers IT security for email, endpoint, and mobile, in addition to phishing simulation and user training.

Video:

For more information, see the datasheet.

A comprehensive keynote on the topic of Cyber Security

You will receive an IT security situation report from us. We will discuss national and international cyber incidents, report on the attackers' actions, and clarify the damages incurred. We will tell you about classical security techniques, challenges, and to-do's for management, and discuss the IT security status of your company. In the end, we will provide you with action recommendations based on the previous dialog.

Workshop followed by rough concept

This module includes a workshop aimed at company management, IT managers, human resources and HR management, works/staff council, data protection officers, IT security officers, marketing and corporate communications in the company. The selection is determined by your company management. A checklist is used to determine the company's situation in terms of its information security awareness. We start with our keynote and then talk about an information strategy and operational security policies. Based on the results, we will provide you with a rough concept as a recommendation for action.

In-person or online workshops for employees

The employee awareness workshop is based on interactive knowledge transfer. We assess participants' knowledge level and exchange experiences together. We discuss various IT security topics such as email security, endpoint security, social engineering, and hackers' motives. We provide tips on how to defend against attacks and prevent IT outages. You can read all the components of our services in our datasheet.