TopAwareness
Fully automated and sustainable security awareness training for your employees
Cyber-attacks aim to exploit technical or human vulnerabilities. In most cases, technical security measures alone are insufficient to protect the company. Human involvement is still the number one risk factor and it is therefore advisable to consider all users within a company when creating a comprehensive security concept.
Our sustainable security awareness service “TopAwareness” helps to sensitize your employees to cyber-attacks and thereby strengthen your human firewall in the company.
TopAwareness uses fully automated, realistic spear phishing simulations and AI-supported e-trainings. This enables you to map a wide range of possible attack scenarios – preparing employees very well for real phishing attacks and at the same time increasing their awareness of them. These training sessions are continuously integrated into everyday work and increase in complexity over time. Using your own awareness dashboard, you can view the development of training at any time and adapt it to your company’s needs.
Advantages
- Continuous spear phishing simulations and AI-supported e-training
- Attack scenarios with increasing difficulty levels
- Fully automated and user-friendly
- Employee Security Index (ESI®) provides information regarding the security level of your company
- Booster option for users who need additional training
- Dashboard with an overview of training successes
- Interactive learning modules and entertaining e-learning
- Automatic onboarding of new users possible at any time
- Can be used for Microsoft 365, dedicated mail server and hosted Exchange (see note 1))
Security awareness training is not new, but is gaining importance. Recent studies have shown that attacks are becoming more sophisticated and authentic due to the use of AI (artificial intelligence). Phishing remains the number one gateway for cyber criminals, especially since the use of emails is firmly anchored in corporate communication. Additionally, BYOD (bring your own device), home office or the private use of business devices are increasing the challenges for the IT department.
Automated spear phishing simulations
TopAwareness’ spear phishing engine uses various psychological manipulation factors as well as publicly available company data and employee-related information to make the examples realistic.
These examples are then automatically delivered to users and at individual times and become more demanding as their knowledge increases. If employees detect and recognize dangerous emails, they can report them directly using the ‘report’ button. If the email is not recognized as such by the employee, they are redirected to a landing page and informed about the phishing attempt at the ‘most teachable moment’.
Your IT department gets insight into training success via a dashboard and can adapt the awareness training to the needs of your company.
Training and Learning Content
In addition to the phishing simulations, TopAwareness’ training concept also includes e-learning and short videos. These cover topics such as BYOD, social engineering, voice phishing, passwords & authentication and many more. This learning content is rolled out automatically as well and adapted to the needs of your company’s users and groups.
The Awareness Engine is the technological heart of the security awareness service and offers a suitable level of training for every employee. It identifies users with special learning needs and then begins more intense training – meaning that each user is trained with customized scenarios adapted to their level of knowledge.
ESI® - Employee Security Index
The Employee Security Index (ESI®) is a scientifically based and patented method for measuring the security habits of employees. Their click and reporting behavior within the simulations is used for the evaluation. The need for e-training is controlled on this basis. With the ESI® you are also given the option to set a value for the desired target security level within your company and to make comparisons across industries and users.
Source: Hornetsecurity
Establish a sustainable safety culture
TopAwareness is constantly going through further development. The simulations are adapted to current attacks and threats. This gives companies a tool to train their employees continuously and, above all, up to date, thereby creating a sustainable, company-wide security culture.
TopAwareness | Setup-costs (one-time expense) | price per user per month |
from 5 2) – 249 Users | upon request | upon request |
250+ Users | upon request | upon request |
1) There are limitations in the reporting and statistical options when using dedicated mail servers or other forms of hosted exchange.
2) For a meaningful Employee Security Index, a minimum number of 10 users is recommended.
Notes:
• Monthly billing is based on the number of users created in the system or analogous to Microsoft 365 (Microsoft 365 mailbox with activated Exchange functionality).
• An AD-connection is required for automatic user management starting from more than 49 users.
Contract details:
• Minimum contract period 36 months.
• Errors and changes reserved.
Frequently asked questions regarding security awareness
What are security awareness trainings?
Security awareness training allows you to educate your employees in the area of cyber security, sensitizing them to the subject and thus increases security in your company.
Why is awareness training important?
Cyberattacks via email remain high and are becoming increasingly sophisticated through the use of AI. This fact makes it all the more important that your employees are able to identify cybercrime and thereby fend off attacks on your company.
How long does a security awareness training take?
Security awareness training is not handled in just one single course, but rather is continuously integrated into your company’s day-to-day work. This increases awareness of how to deal with cyber risks.
What is TopAwareness?
TopAwareness is a sustainable security awareness service from conova that aids companies strengthen the human firewall within their company. It uses fully automated and realistic spear phishing simulations and AI-supported e-training.