Security Awareness Training | Awareness Training

Overview

Make employees part of your security fabric with award-winning security awareness training

When successful cyberattacks are analyzed, they often have one thing in common – some user, somewhere, did something that could have been avoided. Even with today’s most advanced protection, organizations remain vulnerable because of one key factor: human error. The truth is if your employees aren’t ready for a cyberattack, neither is your organization.

Fortunately, continuous security awareness transforms employees into a trusted first line of defense. With Mimecast Awareness Training, you can measurably reduce risk while winning new and unexpected allies in the struggle to keep your organization’s work protected.

Benefits

Inspire a culture of awareness

Build genuine security awareness with the industry’s most engaging and humorous content

Test resilience with real world attacks

Measure your employees’ readiness using de-weaponized phishing attacks from the real-world

Identify risk in real-time

Track progress and monitor vulnerability with dynamic risk scoring

Our Solution

The preferred platform for an integrated approach to email security and security awareness training.

Mimecast Awareness Training is designed with you and your learners in mind. Our solution brings together all the elements of effective security awareness continuously, in partnership with Email Security, and serves as a launch pad for reduced risk and a more resilient organization.

01.

World-class content
Make learners look forward to — rather than dread — training with 100+ humor-driven video modules, developed by TV and film professionals.

02.

Effortless administration

Launch a 12-month program in minutes with rapid deployment and automate administration as needed for a hands-off approach to security awareness.

03.

Real-world assessment
Safely test employees on real-world threats with de-weaponized phishing attacks that targeted your very own users in the wild.

04.

Industry-specific modules
Reinforce critical concepts mapped to key industry standards and security frameworks, including ISO, NIST, PCI DSS, GDPR, and HIPAA.

05.

Comprehensive reporting
Track primary indicators of risk across the awareness training platform and take remedial action with easily discernable user risk scores.

06.

Integrated risk insight
Leverage real-world click behavior from your own email environment to identify your riskiest users.

How It Works

Irresistibly fun (and funny) – See our unique training approach for yourself

Settling for dull and unengaging training is a security risk in and of itself. Mimecast reimagines how best to inspire security awareness, taking complex topics and making them irresistibly fun and understandable through humor – from ransomware, phishing, and impersonation fraud to regulations and privacy rules.

The best part? Employees don’t dread our content. They look forward to it. Engagement and entertainment are core to our approach.

Features

Inspire a culture of security awareness and reduce the risk of human error from a single, easy-to-use platform

Build a resilient organization from the ground-up with effective, continuous risk reduction.

Unforgettable training that aligns with the learning style of your modern workforce
Effortless configuration and scalable administration designed to reduce your workload while reducing risk
Automated training, simulated phishing assessments, and risk scoring

Captivate employees with a humor-forward approach to security awareness training

Employees don’t like our training - they love it. Teach them to detect and avoid threats with a video-based, micro-learning approach that makes them laugh while they learn.

Award-winning, video-based modules delivered to employees monthly
Actionable and memorable lessons, covering unique threats, their impact, and how best to respond
100+ modules covering critical security topics in alignment with industry standards (ISO, NIST, PCI DSS, GDPR, and HIPAA)
20+ new modules delivered each year to keep content fresh and up to date

Train users on real-world phishing attacks to increase awareness and change behavior

Teach your employees to detect and report all kinds of phishing threats with realistic simulations, even ones from the real-world that target your very own users.

De-weaponized simulations taken right from the real world
Pre-made and curated phishing templates
Customizable templates and campaigns for targeted assessments

Track program efficacy and employee performance with comprehensive reporting

Gather key awareness training insights at both the individual and organizational level.

Interactive modules reveal lesson comprehension, security awareness knowledge, and training engagement
Bi-annual surveys capture your learners’ sentiment towards security awareness

Identify your riskiest users and opportunities for targeted remediation with predictive scoring

Monitor and address indicators of risk across the root causes of human error.

Mimecast SAFE Score provides a predictive letter grade (A through F) for risk based on a user’s unique interactions with Awareness Training assessments
Integration with Email Security elevates SAFE Score with real-world click data to present an even clearer picture of user risk

Web security

Protect your employees against malicious and inappropriate websites with a 100% cloud-based service that integrates with Mimecast Email Security for consistent cyber protection.

LEARN MORE

Brand protection

Safeguard your digital brand to protect employees, customers, and partners by identifying and blocking brand impersonation attacks exploiting websites similar to your own.

LEARN MORE

FAQs

What is security awareness?

Security awareness training refers to employee understanding of cyber hygiene, identifying the many ways attackers try to breach critical business systems or personal accounts, and how users play a critical role in stopping attacks to protect their organization.

Why do we need security awareness training?

Research suggests that human error is involved in more than 90% of security breaches. Security awareness training mitigates user risk by educating employees about the potential mistakes and proper procedure they need to follow when utilizing email and the web. It promotes more secure behaviors to protect personal and organizational data.

What are best practices for how to develop security awareness training?

Effective security awareness training focuses on engaging today’s workforce to reduce user risk. Many security awareness training programs ignore education best practices, delivering training in one-off sessions that overwhelm users with information or worse, are forgettable. For training to stick, it needs to be persistent, delivered regularly in small doses, to fit employees’ busy schedules. Most importantly, positive reinforcement and humor performs better than fear-based or boring messaging to improve retention of critical security topics.

How long should a security awareness training program be?

The length of security awareness training programs varies widely. Mimecast's approach is to provide short training sessions on a monthly basis, delivering ongoing education that keeps security best practices fresh on employees' minds.

What awareness topics should an effective security awareness training program include?

Mimecast Awareness Training provides 12 to 15 modules of new information security awareness training content per year, ensuring that and users get fresh and persistent training throughout the year with updated learning about the continuously changing threat landscape.

Our program includes security awareness training on:

Passwords, to make sure employees use strong passwords rather than personal passwords.
Privacy, to show how to protect personal information of employees, customers, partners and your company.
Phishing training, to help employees recognize phishing attacks and to show what happens when they are careless about responding to phishing messages.
PCI, to help employees ensure PCI compliance by recognizing and avoiding social engineering attacks.
HIPAA, to help employees avoid carelessness and oversight that can lead to a catastrophic breach.
Ransomware, to show how easy it is to succumb to an attack and how disastrous ransomware can be to companies and individuals.
CEO/wire fraud, to show what CEO fraud and wire fraud look like and what it feels like to be the person who lost thousands of dollars for the company.
Data in motion, to show how vulnerable data is when it's in motion, and how to protect it.
Office hygiene, to cover best practices for securing paper, desks, screens and buildings.
GDPR, to outline the data privacy rights that all employees must know and practice.

Does Mimecast offer Microsoft Office 365 security and compliance training?

Mimecast Awareness Training includes many topics that are relevant to Microsoft Office 365 security and compliance. These include instructions in compliance for GDPR, PCI and HIPAA as well as training in how to deal with impersonation fraud, ransomware and phishing attacks.

Security Awareness Training & User Behavior