A campaign can consist of either a single phishing test or a recurring series of tests done weekly, bi-weekly, monthly, or quarterly. You can define which accounts, users, or groups to target. You can also select individual phishing templates for a one-time test, a fully randomized system, or managed templates so that users on your managed accounts receive different phishing templates at different times.
To create a new managed phishing campaign, navigate to the Phishing tab and click the + Managed Phishing Campaign button in the upper-right corner of the screen. This action will take you to the New Managed Phishing Campaign screen. For more information about this screen, see the screenshot and list below:
- Campaign Name: Enter a name for your phishing campaign here. This field is required.
- Send to: Click Select Accounts to select which accounts you want to include in this phishing campaign. Click Select Users or Groups to select either specific groups or select All Users for each selected account. You also have the option to click Add All Account Users from Select Users or Groups instead of clicking All Users for each account.
- Frequency: Select how often you would like to send Phishing Security Tests (PSTs) for this campaign. If you select One-time, this campaign will send one PST to the selected accounts, users, or groups. For ongoing phishing campaigns, we recommend selecting either Bi-weekly or Monthly.
- Start Time: Set the date, time, and time zone you would like your phishing campaign to start. Your default time zone is the one set in your Account Settings.
-
Sending Period: Select when to start sending PSTs. You can choose to send all of the emails at once or over a period of time.
- Send all emails when the campaign starts: Emails will begin sending as soon as the campaign begins. The timing of sending and delivery will vary, depending on the number of users in the campaign. In most campaigns, all emails will be sent within an hour after the campaign starts. Users will not receive the email at the same time, but they will receive it on the same day.
- Send emails over…: Selecting this option will send phishing tests to the users randomly during the time period selected. You can enter a number between one and six and pick business days, weeks, or months.
- Track Activity: Choose how long you would like to track activity on your phishing campaign. This period will begin after the last email is sent. The minimum tracking duration is 1 day, while the maximum is 6 months. The digit entered must be from 1 to 6. At a minimum, we recommend tracking activity for at least 3 days. Here, days refer to calendar days rather than business days. Activity includes clicks, attachment opens, replies, data entry, and reporting by the Phish Alert Button (PAB). You and local admins can see this information from individually managed accounts on the Phishing tab.
- Track Replies to Phishing Emails: If you select this check box, you can track if users on your managed accounts are prone to responding to phishing emails. For more details on this feature, view our Reply-To Phishing Guide. You and local admins can see this information from individually managed accounts on the Phishing tab.
- Template Topics: Select the phishing template topics you want to use. You can select one or more phishing template topics. By default, no template topics are selected, and your templates will be random. This field is required.
- Set Template Language: Use this check box to select the languages you want to use in this phishing campaign. If multiple languages are selected, users will receive templates in any of the selected languages. This setting will override the account’s default phishing language and the language set in the user’s profile. When this check box is selected, the Language Override drop-down menu will appear. You can select a maximum of five languages.
- Difficulty Rating: Select the difficulty rating for your phishing campaign from the drop-down menu. For more information about difficulty levels, see our Template Difficulty Ratings Overview article.
-
Template Selection: Select what type of template you would like to use. You can select a specific template or use one of our Automated Template Selections: AIDA Selected, Full Random, or Random. For more information, see our Automated Template Selection Overview article. If you selected to use a specific template, the Specific Template drop-down menu will appear.
Tip:If you’re interested in further customizing your phishing templates, see our Hide Phishing Templates or Categories and KnowBe4 Console Account Settings: Phishing articles.
- Phish Link Domain: Select the domain you would like to display for phishing links in your campaign from the drop-down menu. Each domain is owned by KnowBe4 and is only used for PSTs. By default, this field will select a random domain. For more information on available domains or how to hide a domain from use, see our Manage Phish Link Domains article.
- Landing Page: Select the landing page you want to use for your phishing campaign from the drop-down menu. Landing pages are what your users see when they fail a phishing test. If you customized a landing page for your campaign, it will be automatically selected in this field. For more information about landing pages, see our Change the Landing Page on Your Phishing Campaign and Create and Edit Email Templates and Landing Pages articles.
- Send an email report to account admins after each phishing test: Select this check box to automatically send a report to all account admins each time a phishing test finishes. The reports include metrics such as Phish-prone Percentage, number of attachments opened, and more.
- Hide from Reports: Select this check box to hide the phishing campaign from user profiles and phishing reports. Hidden campaigns will not impact Risk Scores or Phish-prone Percentages. We recommend using this option when running a test campaign for whitelisting or other phishing functionality tests.
- Prevent campaign edits by local account admins: You can select this option to prevent admins on your managed accounts from editing this campaign.
- Create Managed Campaign: Once you’ve finished customizing your phishing campaign, click this button to save all changes.