Using Risk Boosters

A Risk Booster is a manual tool that works with KnowBe4's Virtual Risk Officer (VRO) feature. Admins of your account can use this tool to intentionally increase or decrease the risk score of any user or group. The default Risk Booster for all users and groups is Normal Risk. 

Users within a group will inherit the effects of the Risk Booster applied to that group. Meaning, the user's Personal Risk Score will be impacted, even though their user-specific Risk Booster has not changed.

• Example: A user with a Normal Risk booster is placed in a group with a High Risk booster. The user's overall Personal Risk Score will increase while their Risk Booster still displays Normal Risk.

The highest Risk Booster applied to a user—whether this is the user-specific Booster or the group Booster—will be the one that impacts their Personal Risk Score.

• Example: A user with a Very High Risk booster is placed in a group with a Normal booster. The user's overall Personal Risk Score will reflect the highest booster, which is Very High Risk.

Jump to:
Use cases
Settings
Modify a user's Risk Booster
Modify a group's Risk Booster

Use Cases: Why Use Risk Boosters?

Risk Boosters can be used to support the security goals of your organization. There are several reasons why you might want to manually change a Risk Booster.

Here are examples of what a higher Risk Booster can represent for a user:

• Because of their position or job title, this user is more likely to be targeted by phishing or social engineering attacks.
• This user has privileged access or confidential information that would increase the impact of a successful social engineering or phishing attack.
• This user is known to fall for every simulated phishing attack you send and does not take their training as scheduled or mandated.

Here are examples of what a higher Risk Booster can represent for a group:

• The users in this group are targeted more often with phishing or social engineering attacks.
• It would have a greater impact if the users in these groups became victims of a phishing or social engineering attack.
• The users in these groups have access to sensitive or confidential information that other groups do not have.

Below are examples of users or groups you may want to modify the Risk Booster for:

• C-level executives, such as CEOs, CFOs, etc.
• Accounting or Finance Representatives or Departments
• Managers or VPs
• Those with access to sensitive databases that include personally-identifiable information (PII) or credit card information

Back to top 

Risk Booster Settings  

The Risk Booster has four options which increase or decrease the risk score of the user or group: 

Back to top

How to Modify a User’s Risk Booster

A user's Risk Booster can be modified within their profile. To edit a user's Risk Booster:

1. Navigate to the Users tab.
2. From the user list, find the user you would like to modify.
3. Under the Actions column, click the drop-down arrow of the desired user and select Edit.
4. This will take you to their User Information tab. (click to view).
   ×

   User Information Tab

   

   Close
5. On the User Profile page, select the desired Risk Booster for the user. 
   
6. Click Update User to save your changes.

Back to top

How to Modify a Group’s Risk Booster

A group's Risk Booster can be modified within that group's settings. To edit a group's Risk Booster:

1. Navigate to the Users > Groups tab.
2. From the groups list, find the group you would like to modify.
3. Under the Actions column, click the drop-down arrow of the desired group and select Edit.
4. From the Edit Group page, select the desired Risk Booster. 
   
5. Click Update Group to save your changes.

Back to top