Short videos, flexible scheduling, gamification as incentive, and individually generated phishing test emails

Participation in an Awareness training is a legal obligation for all employees who use the internet in many companies. Some managing directors undergo training themselves and must then prove that they have passed on their knowledge to all employees. Alternatively, an instructor is invited to train all employees.

And then?

Do you really believe that everyone will remember what they learned?

Or do people quickly revert to their usual routines, leaving the risk of a cyberattack as high as before?

Our employees at BBCom are trained using the Securepoint Awareness Plus program.

The feedback on this program is convincing:

• "I like the fact that each module lasts only 5–10 minutes and I can watch them flexibly whenever they fit into my daily work routine."
• "I particularly appreciate that I don’t have to watch a video with an instructor; instead, I can choose an illustrative film or even an animated cartoon."
• "I enjoy the quizzes after the modules. They let me prove that I’ve understood everything, and afterwards I can print out a certificate each time."

What makes this program special is that AI generates individualized and deceptively real phishing emails for all participants, which are sent at unpredictable times. If someone isn’t careful and clicks on a link, they are taken to a training page that explains how they could have recognized the fake.

As the person responsible, I can monitor my employees’ progress at any time using the dashboard.

And what is most important from an administrative perspective: I can prove that I am training my employees.

Since we are all so enthusiastic about the program, I can wholeheartedly recommend it to you.

Get in touch with us—we will provide you with the program and even set it up for you.

Which companies are required to train their employees?

1. Areas clearly required by law

Certain industries are explicitly required to provide employee training:

• KRITIS companies (critical infrastructures) under the BSI Act
      → must implement organizational and technical measures, which includes training.
• Financial sector (banks, insurance companies) under guidelines such as BAIT and VAIT
      → Awareness training is explicitly required.