Re: Awareness Training

[Rob Milman <rob.milman () SAIT CA>]

+1 for KnowBe4.

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Rick DeCaro
Sent: Tuesday, January 28, 2020 2:45 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Awareness Training

We implemented KnowBe4 this past October and I can't say enough good things about it.  Our Phish Prone percentage went 
from over 35% to under 6% after 1 month of training and phishing our users.   It also has specific modules for PCI, 
Ferpa, HIPPA, etc.   The reporting is great and the automation of it all makes it very easy to use once you get it all 
setup.   We also send out monthly security awareness newsletters via email and have graphics about security awareness 
on our message boards around campus.

Rick

Rick DeCaro
Director of Information Technology | Logan University
1851 Schoettler Road | Chesterfield, MO 63017
Phone: (636) 230-1911 | Logan.edu<http://www.logan.edu/>

[https://www.logan.edu/mm/images/Test/LoganUniversityLeadersMadeSignature.jpg]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Pete, Andrew
Sent: Tuesday, January 28, 2020 3:21 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Awareness Training

This e-mail was received from an external source. Please be cautious when replying, clicking links or opening 
attachments.

I'm specifically looking for a training platform like KnowBe4 that we can use to assign and track training modules to 
employees.  I'm still trying to decide what I want out of the platform which is why I asked a more broad question.  I 
would like something that covers basic information security topics including social engineering.  Ideally I'd like 
something that also has training on topics related to specific compliance such as PCI, GDPR, etc.

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Younes, Wiam H
Sent: Tuesday, January 28, 2020 3:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Awareness Training


This message originated outside of New England Institute of Technology. Use caution when opening attachments, clicking 
links or responding to requests for information.
Hi Pete,


When mentioning an awareness system, are looking to raise awareness in a specific area, e.g., Phishing?



An Information Security Awareness program encompasses an array of educational and communication methods to raise your 
constituents' knowledge level on key security issues for the protection of their personal and the institution's 
information assets. EDUCAUSE offers online material on establishing an Information Security Awareness Program at 
https://www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/security-awareness-quick-start-guide<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Ffocus-areas-and-initiatives%2Fpolicy-and-security%2Fcybersecurity-program%2Fresources%2Finformation-security-guide%2Ftoolkits%2Fsecurity-awareness-quick-start-guide&data=02%7C01%7Crick.decaro%40LOGAN.EDU%7Cd5a7eeffb1d04355ae3608d7a437f959%7C12b0502287ae4711b25c041c20615f0a%7C0%7C0%7C637158432636215588&sdata=b2O%2BW%2FOA%2FOiVYBi3kTRqu2XIzbQBPENNkuFtjfuTAJM%3D&reserved=0>



You may also consider joining the monthly EDUCAUSE Awareness and Training group, where Information Security Awareness 
professionals working in Higher ED meet to discuss best practices, processes, requirements and innovative Awareness & 
Training methods. Valerie Vogel at vvogel () educause edu<mailto:vvogel () educause edu> can send you a meeting invite 
if interested.

Please don't' hesitate to reach out if I can be of any assistance.

Thank you,
Wiam
--------------------------------------------------------------------------------------
Wiam Younes, Ph.D.
Information Security Training Officer
Information Systems and Computing|Office of Information Security
3401 Walnut Street|Suite 232A| Philadelphia|PA. 19104
W.215.898.0040| F.215.573.2037|Email: younes () upenn edu<mailto:younes () upenn edu>
[cid:image001.jpg@01D5D5F5.FF54F7C0]

From: Pete, Andrew<mailto:000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU>
Sent: Tuesday, January 28, 2020 12:08 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Awareness Training

Hello Everyone,

We are looking to implement an awareness training system.  I'm curious what other institutions are using and any 
recommendations on features/capabilities.  Thanks in advance.

Andrew Pete
Information Security Architect

New England Institute of Technology
One New England Tech Boulevard
East Greenwich, RI 02818-1205
401-780-4460 (Direct)
apete () neit edu<mailto:apete () neit edu>

[NEIT_Full_Stack_H_White_BG_PNG1]



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Crick.decaro%40LOGAN.EDU%7Cd5a7eeffb1d04355ae3608d7a437f959%7C12b0502287ae4711b25c041c20615f0a%7C0%7C0%7C637158432636215588&sdata=uQvg3x2ChUt%2B07BaKYSzBe9Fj57giLk28s0Z0rg50R8%3D&reserved=0>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Crick.decaro%40LOGAN.EDU%7Cd5a7eeffb1d04355ae3608d7a437f959%7C12b0502287ae4711b25c041c20615f0a%7C0%7C0%7C637158432636225579&sdata=mCa7H3fAb28z%2FncnZvA44Hxj5h8QV3gweRFB9nzUcFM%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Crick.decaro%40LOGAN.EDU%7Cd5a7eeffb1d04355ae3608d7a437f959%7C12b0502287ae4711b25c041c20615f0a%7C0%7C0%7C637158432636225579&sdata=mCa7H3fAb28z%2FncnZvA44Hxj5h8QV3gweRFB9nzUcFM%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community