Why do companies need phishing training and awareness solution for their employees? – In today’s world, 85% of IT security breaches are attributed to successful phishing and social engineering attacks targeting the weakest link in the cyber security chain (aka, employees)!
And this year 9 out of 10 phishing attempts are ransomware attacks that encrypts your data and won’t release it unless a ransom is paid.
And no matter how big the investment in high-tech security solutions is, the number of breaches from phishing and complicated social engineering attacks continue to rise bypassing all network security defenses and often making its way into users mailboxes. Luckily, Phishmark is here to reduce this risk, especially when implemented as part of a comprehensive information security awareness program.

What is Phishmark?

PhishMark is an affordable phishing simulation framework that allows information security staff to schedule and launch phishing simulation campaigns utilizing a variety of ready-made email templates. Campaign results will identify, in-real time, the users who took the bait, and provide awareness material on the spot by redirecting them into a pre-designed educational landing page. Statistical reports will provide top management with an overview of the current status and the progress of users in identifying and reporting phishing attacks and adapting safe habits.

Phishing Training for Employees – Life Cycle

Once-a-year security awareness and training session is one way of doing things, yet, it is not enough! You need an on-going solution that meets the trends and can point out the weakest link so you can harden it.
CIATEC’s PhishMark is the solution you need to empower “the human firewall“!

Phishmark is a phishing training and awareness solution for employees that goes around the year running simulations to cover every angle a hacker might use to get into a company’s network through phishing and social engineering attacks. We follow the below steps:

1. Baseline: The first step is to establish baseline by running an initial campaign.
2. Train: Provide awareness material based on the results of the first campaign.
3. Phish: Run new phishing campaign.
4. Analyze: Analyze the results and measure the progress.

It is important to note that Phishmark is proven to provide better results when integrated with Ciatec’s information security awareness program.

PhishMark – Phishing Training Main Features

Dashboard

PhishMark will show a dashboard for all campaigns as well as separate dashboard for every single campaign. The dashboard will show:

1. Number of phishing simulation emails “or baits” successfully delivered.
2. Number of employees that opened the simulation phishing email.
3. Percentage of employees that actually took the bait, i.e.; clicked the link.
4. Number of users who actually submitted data to the pretend hacker.
5. And finally, the information security specialist running the simulation will be able to count the number of employees that actually reported the threat.

Email Templates

Administrator will be able to create his own email templates that fits his organization. Or use ready-made email templates covering many domains and season, including: Banking, social media, eCommerce and many more.

Grouping Users

The solution allows creation of target groups. Useful for targeting every department with a separate phishing campaign.

Landing Pages

Employees who fall victims for phishing campaigns will be redirected to a previously designed landing page similar to the below. Administrator is free to use ready-made phishing awareness landing pages provided by PhishMark, or upload his/her own.

Questions?

Ask us on ask@ciatec.com or contact us today to start using PhishMark to Phish and Mark employees that need further training and awareness on phishing and social engineering.

The post Meet PhishMark: Phishing Training & Awareness Solution from CIATEC appeared first on CIATEC.